$2.7 Million HIPAA Settlement Reached with OHSU After Repeated HIPAA Violations

Oregon Health and Science University (OHSU) has reached a settlement with the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) for $2.7 million. The HIPAA settlement comes after two separate data breaches were reported to OCR dating back to 2013. Combined, these breaches affected more than 7,000 patients. The first breach was caused by a laptop theft. A surgeon was vacationing [...]