SolarWinds Hack Blamed on Intern Mistakes
As an organization that specializes in cybersecurity, SolarWinds did a particularly poor job of protecting their file server. This is evident by the fact that not only did they [...]
Third-Party Causes Kroger Pharmacy Breach
The influx of third-party breaches should be of concern for any organization working in healthcare. Hackers often target third-party providers to access the sensitive data that they manage for [...]
Risks of Mobile Health Apps: Are Health Apps Putting PHI at Risk?
A recent study concluded that many popular mobile health apps pose a risk to protected health information (PHI) security. The study analyzed the security of 30 health apps that [...]
Importance of Vendor Due Diligence Highlighted by Breach
It was recently announced that Bonobos, a subsidiary of Walmart, was the victim of a breach that exposed the personal information of millions of their customers. However, hackers did [...]
Guidance on HIPAA and Cloud Computing: How Can You Use Cloud Software and Comply with HIPAA?
Cloud computing allows users to access data stored in the cloud from anywhere with an internet connection. Because of its ease of use, using the cloud to store business [...]
2021 Healthcare Cybersecurity Expectations
We previously wrote about the new proposed cybersecurity incentive law, HR 7898, that is aimed at making the healthcare industry more focused on keeping patient information secure. But what [...]
OCR 2020 and HIPAA Security Rule Violations
In 2020, the Department of Health and Human Services’ (HHS) Office for Civil Rights issued a record 19 fines for failure to comply with the HIPAA regulations. Six of [...]
$5.1 Million Fine Announced for HIPAA Data Breach
The Department of Health and Human Services (HHS) Office for Civil Rights has entered into a settlement with the Excellus Health Plan, under which Excellus has agreed to pay [...]
HIPAA Cybersecurity Best Practices Incentivized in New Bill
On January 5, 2021, President Trump signed into law legislation approved by the House Energy and Commerce Committee known as HR 7898. HR 7898, now law, requires [...]
HIPAA Cybersecurity Best Practices Incentivized in Proposed Bill
Recent legislation approved by the House Energy and Commerce Committee known as HR 7898 would require the Department of Health and Human Services (HHS) to incentivize a covered entity’s [...]
