Phishing Attacks at Magellan Health Subsidiaries
Magellan Health is a managed care provider based in Arizona. Recently, Magellan Health discovered that two of its subsidiaries suffered phishing attacks. The phishing attacks have [...]
OCR Provides New FAQs to Clarify How PHI Should be Shared Between Covered Entities
The Health Insurance Portability and Accountability Act (HIPAA) dictates how and when protected health information (PHI) can be shared. There has been some confusion around sharing [...]
OCR HIPAA Enforcement Gets Serious Amid Growing Patient Complaints
Patient complaints regarding HIPAA violations have become more prominent over the last few years and the Department of Health and Human Services (HHS) Office for Civil [...]
California HIPAA Fine Concludes All-Time Record Year for HIPAA Enforcement
HIPAA enforcement activity reached an all-time record in 2018, according to The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS). In 2018, [...]
Another Criminal HIPAA Violation, Possible Jail Time
Criminal HIPAA violations are becoming more and more commonplace--and this recent example proves that the risks may be growing. A gynecologist based out of Springfield, Massachusetts was convicted of [...]
Ransomware, Interoperability, Medical Apps Major Focus of 2017 HIPAA Enforcement
Office for Civil Rights (OCR) Director Roger Severino made major suggestions into upcoming 2017 HIPAA enforcement in his opening talk at Health Datapalooza 2017. Severino is [...]
March 1st HIPAA Breach Report Deadline to HHS Approaching
The March 1st HIPAA breach report deadline is fast approaching. HIPAA regulation mandates that healthcare providers must report breaches of unsecured protected health information (PHI) to [...]
EHR Vendors at Risk of 2017 HIPAA Enforcement Actions
The threat of a HIPAA investigation is only one of the exposures that EHR vendors face when it comes to the implementation of privacy and security standards. One of [...]
First Settlement for Violating the HIPAA Breach Notification Rule
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced its first settlement for violating the HIPAA Breach Notification Rule with Presence Health for $475,000. [...]
Over Half a Million Affected by Data Breach at Georgia-based Orthopedic Firm
The Atlanta, Georgia-based Peachtree Orthopedics reported that the records of over half a million patients were compromised in a cyberattack in September of 2016. The firm first notified patients [...]
