46K Exposed in Veterans Affairs Breach
An online application handling medical payments for the Department of Veterans Affairs was breached, potentially exposing the personal information of 46,000 members. More details on the Veterans [...]
2.2 Million Patients Affected by August Healthcare Breaches
The Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) publicly posts breaches affecting 500 or more patients on their online breach portal known colloquially as [...]
Employees Involved in Unauthorized Access to Patient Medical Records of George Floyd
Hennepin County Medical Center (HCMC), the facility that treated George Floyd, fired 13 employees for unauthorized access to patient medical records. More details are discussed [...]
Patient Data Breach Exposes COVID-19 Patients
On August 17, the Department of Public Safety (DPS) of South Dakota sent out breach notifications to patients exposed by a June 19 data breach. The patient data [...]
3.1 Million Patients Exposed by Unsecure Healthcare Database
Recently, security researcher, Volodymyr Diachenko, discovered a healthcare database left available for public view. The healthcare database, containing the protected health information (PHI) of 3.1 million patients, was easily [...]
Large-Scale HIPAA Security Breach: Improper Use of GitHub
Recently, the improper use of GitHub led to a large-scale HIPAA security breach, leaving the protected health information (PHI) of 150,000 - 200,000 patients available through publicly [...]
1.12 Million Affected by July Healthcare Breaches
The Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) posts breaches affecting 500 or more patients to their online breach portal. The “wall of shame” [...]
$1,040,000 OCR Settlement Reached for Stolen Unencrypted Laptop
Lifespan Affiliated Covered Entity (“Lifespan ACE”) is a HIPAA-covered entity. This not-for-profit health system includes three academic teaching hospitals, a medical and mental health services hospital, and Rhode Island’s [...]
Failure to Deidentify PHI Exposed Hundreds of Patients
On April 9 students from the University of Delaware contacted the Delaware Division of Developmental Disabilities Services (DDDS) regarding a research project. The students requested demographic [...]
What Happens to HIPAA Lawsuits?
HIPAA lawsuits - litigation involving a plaintiff claiming violation of a HIPAA regulation - usually do not get very far, as the plaintiffs in a data breach lawsuit against [...]
