Malware Costs UMass $650k in HIPAA Violations

The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced a $650,000 settlement with the University of Massachusetts Amherst (UMass) in the wake of potential HIPAA violations. UMass reported a malware incident in June of 2013. According to the investigation, a workstation in the University's Center for Language, Speech, and Hearing was infected with malware, resulting in the "impermissible disclosure" of the electronic protected health [...]