46K Exposed in Veterans Affairs Breach
An online application handling medical payments for the Department of Veterans Affairs was breached, potentially exposing the personal information of 46,000 members. More details on the Veterans [...]
2.2 Million Patients Affected by August Healthcare Breaches
The Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) publicly posts breaches affecting 500 or more patients on their online breach portal known colloquially as [...]
Employees Involved in Unauthorized Access to Patient Medical Records of George Floyd
Hennepin County Medical Center (HCMC), the facility that treated George Floyd, fired 13 employees for unauthorized access to patient medical records. More details are discussed [...]
215K Patients Affected in Latest Phishing Attacks in Healthcare
Utah Pathology Services and Dynasplint Systems are the latest victims of phishing attacks in healthcare. More details about the incidents are discussed below. Phishing Attacks in Healthcare: Utah [...]
Patient Data Breach Exposes COVID-19 Patients
On August 17, the Department of Public Safety (DPS) of South Dakota sent out breach notifications to patients exposed by a June 19 data breach. The patient data [...]
Healthcare Ransomware Attack Claims 657,392 Victims
Northern Light Health Foundation is the latest victim of the ransomware attack on Blackbaud Inc. Blackbaud was targeted by hackers, as they are one of the largest administration fundraising [...]
Large-Scale HIPAA Security Breach: Improper Use of GitHub
Recently, the improper use of GitHub led to a large-scale HIPAA security breach, leaving the protected health information (PHI) of 150,000 - 200,000 patients available through publicly [...]
1.12 Million Affected by July Healthcare Breaches
The Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) posts breaches affecting 500 or more patients to their online breach portal. The “wall of shame” [...]
$1,040,000 OCR Settlement Reached for Stolen Unencrypted Laptop
Lifespan Affiliated Covered Entity (“Lifespan ACE”) is a HIPAA-covered entity. This not-for-profit health system includes three academic teaching hospitals, a medical and mental health services hospital, and Rhode Island’s [...]
Failure to Deidentify PHI Exposed Hundreds of Patients
On April 9 students from the University of Delaware contacted the Delaware Division of Developmental Disabilities Services (DDDS) regarding a research project. The students requested demographic [...]
