Over 70,000 Records May Have been Breached by California Business Associate
Stephan C Dean, the co-owner of the California record storage company Surefile, reported a hacking/IT incident to the HHS’ Office for Civil Rights (OCR) on…
Read MoreHIPAA Violation News
Massive Increase in WHO Hacking Attempts During Current Pandemic
Multiple Phishing Attacks Reported, Targeting Three Bodies
Five-Year Insider Data Breach Identified at Hawaii Pacific Health
Ransomware Attack Hits NRC Health
HIPAA Violation Hits 16,167 Patients Patients at Hospital Sisters Health System
Business Associate Data Breach Impacts 654,000 Members of Health Share of Oregon
Personal and Health Data of LabCorp Patients Breached due to Website Error
Quest Health Systems Locates More Patients Impacted by 2018 Phishing Attack
Adventist Health Sonora Reports Phishing Attack
Adventist Health Sonora in California has found out that an unauthorized person has obtained access to the email account of a hospital associate and may…
Native American Rehabilitation Association of the Northwest Impacted by Malware Attack
Native American Rehabilitation Association of the Northwest, Inc., (NARA) a Portland, OR-based supplier of education, physical and mental health services and substance abuse treatment services…
49,351 Patients of Alomere Health Hit by Phishing Attack
50,000 patients of Alexandria, MN-based Alomere Health are being contacted to advise them that a portion of their protected health information was potentially accessed by…
114,466 Patients of Truman Medical Centers Notified Regarding Potential PHI Exposure
Truman Medical Centers, the biggest provider of inpatient and outpatient services in Kansas City, MO, has found out that the protected health information of 114,466…
10,000 Medicare Beneficiaries have PHI Exposed by CMS Blue Button 2.0 Coding Bug
The Centers for Medicare and Medicaid Services (CMS) has found that a vulnerability in its Blue Button 2.0 API that allowed access to the…
Conway Medical Center and Equinox Inc. Report Email Security Breaches
The email accounts of several staff members of Conway Medical Center in South Carolina have been obtained by unauthorized persons. The phishing attack was first…
Ransomware Attack Impacts Hackensack Meridian Health
Hackensack Meridian Health, the biggest health network in New Jersey, has revealed it was targeted in a cyberattack recently which resulted in ransomware being deployed…
Hospital Employee Stole and Sold Patients’ PHI Using WhatsApp Encrypted Phone App
Brooklyn’s Kings County Hospital discovered that one of its former staff in the emergency department has allegedly stolen the protected health information (PHI) of about…
Texas Nurse Lost Her Job Because of Posting PHI on Social Media
A nurse working at a Texas children’s hospital was laid off for posting protected health information (PHI) on a social media site, which is a…
Premera Blue Cross Destroyed Key Evidence of Cybersecurity Breach
There is a new development in the legal case that the Premera Blue Cross data breach 2015 victims filed. As per the victims, Premera Blue…
University of Pittsburgh Medical Center Staff Punished for Criminally Violating HIPAA Regulations
An ex-employee at the University of Pittsburgh Medical Center, who is the patient information coordinator, was charged by a federal grand jury with criminal violations…
2016 Banner Health Data Breach Likely to See Financial Penalty From OCR
Banner Health issued a financial report mentioning OCR’s investigation of the colossal 2016 Banner Health data breach. In the said breach incident, 27 Banner Health…
FMCNA to Pay $3.5 Million for HIPAA Violations Resulting in Five Data Breaches
The Department of Health and Human Services’ Office for Civil Rights (OCR) announced the first case of HIPAA settlement for 2018. For multiple potential HIPAA…
PHI of 842 Western Washington Medical Group Patients Exposed
Documents containing the sensitive information of 842 patients at Western Washington Medical Group were compromised on November 13, 2017. Apparently, the documents were thrown away…
Palomar Health Nurse Viewed 1,300 Patients’ Medical Records Without Authorization
An unauthorized former nurse in Palomar Medical Center Escondido viewed the medical records of over 1,300 patients. The patient privacy violations happened in a period…
24,000 Emory Healthcare Patients Impacted by Data Breach
A former physician at the Emory Healthcare (EHC) took the protected health information of thousands of EHC patients without hospital authorization and knowledge. He uploaded…
Medicaid Billing Company Pays $100,000 for Data Breach Case with Massachusetts Attorney General
The Multi-State Billing Services (MBS) based in New Hampshire experienced a data breach that resulted to a financial settlement of $100,000 with Massachusetts attorney general’s…
Lawsuit Filed Against 60 Hospitals for Violating the HITECH Act
An unsealed complaint against 60 hospitals was filed in a U.S. District Court in Indiana in 2016 for violating the HITECH Act. The 60 hospitals…
UK Man Linked to The Dark Overlord Hacking Group To Serve 3-Year Jail Term
A man was sentenced to serve a three-year jail term for fraud and blackmail offenses. Nathan Wyatt, a 36-year old from Wellingborough, England was allegedly…
Phishing Attack at Baptist Health Louisville Potentially Impacted 880 Patients
A security breach at Baptist Health in Louisville, Kentucky was discovered on October 3, 2017. Potentially 880 patients had been notified that their sensitive information…
Nurse Terminated from Work for HIPAA Violation
Nurse Dianna Hereford’s employment contract was terminated after a patient of Norton Audubon Hospital complained of a nurse HIPAA violation. Hereford filed an action in…
Former Nurse Who Stole Patient Information and Committed Tax Fraud Convicted
Tangela Lawson-Brown, a former nurse in a Tallahassee nursing home from October 2011 to December 2012, was convicted of possession of unauthorized access devices, wire…
SAManage USA Paid $264,000 as Data Breach Settlement
The SAManage USA data breach in 2016 caused the online exposure of the Social Security numbers of 660 Vermont residents. The Vermont Attorney General required…
Impact of Florida Blue Data Breach Revealed
Florida Blue, the business name of Blue Cross and Blue Shield of Florida, has recently announced that the personally identifiable information of a nearly one…
Patient Files Stolen from Storage Facility in New Jersey
Following a break-in at a file storage facility in East Brunswick, New Jersey, the Otolaryngology Associates of Central Jersey is in the process of alerting…
Amazon and MongoDB Announce New Security Features
Amazon Web Services has announced that new safeguards have been incorporated into its cloud server that reduce the probability that users to misconfigure their S3…
RBS Releases Report on Data Breach Statistics in 2017
A report covering data breaches in 2017 has recently been released by Risk Based Security (RBS). The report revealed there has been a 305% increase…
Illinois Healthcare System’s Business Associate Experiences PHI Breach
Cook County Health and Hospitals System has recently alerted patients to a breach of their protected health information (PHI). The organisation consists of a health…
CCDA Servers Experience Malware Attack
In August, the Catholic Charities of the Diocese of Albany (CCDA) performed a routine upgrade of its computer security software. While the technicians were working…
How Many HIPAA Violations Since 2016?
The Department of Health and Human Services’ Office for Civil Rights (OCR) has increased its enforcement operations in recent years, and 2016 HIPAA settlements were…
ECKAAA’s Servers Attacked by Ransomware
The Ottawa-based East Central Kansas Area Agency on Aging (ECKAAA) has recently announced that it experienced a ransomware attack. The attack caused files on one…
Former Employees of Valley Family Medicine Found Responsible for Data Breach
Two former employees of Valley Family Medicine in Staunton, VA have been discovered to have inappropriately used a patient list, in violation of the practice’s…
Desktop Stolen from Healthcare Office Results in Breach of PHI
The Brevard Physician Associates has announced that they have experienced a breach of protected health information (PHI). They state that the breach occurred due to…
Over 680 Patients Affected by TJ Samson Data Breach
An independent care provider, who provides care to patients of TJ Samson Community Hospital in South Central Kentucky, has recently been discovered to have inappropriately…
New WannaCry Virus Attacks FirthHealth, Carolinas
FirstHealth of the Carolinas, a Pinehurst, SC-based not for profit health network, has recently announced that it has experienced a data breach. They have identified…
Engine Manufacturing Company Experiences Malware Attack
Briggs Stratton Corporation, a manufacturer of lawnmower engines, has recently reported that they have experienced a breach of PHI, resulting from a malware attack. It…
Email Phishing Scam Results in Healthcare Organisation Breach
Phishing-the act of obtaining sensitive information such as usernames, bank details or other private information, often for malicious reasons, by disguising as a trustworthy entity…
Former Texas Children’s Health Plan Employee Breaches HIPAA
Texas Children’s Health Plan has announced a breach of nearly 1,000 patient’s protected health information (PHI). The organisation said that the breach was discover when…
Server Breach Affects Over 8,000 Patients at ASPC
The Advanced Spine & Pain Center (ASPC) has announced that it has experienced a potential breach and unauthorized use of their protected health information. The…
Stolen USBs Result in Breach of PHI
The Man-Grandstaff VA Medical Center in Spokane, WA has announced that it has experienced a breach of PHI. The breach was a result of the…
PHI Records Found Stored in Basement
Dr Riaz Baber, M.D.-a Naperville, Illinois-based psychiatrist-has recently admitted to a breach of patient protected health information (PHI). The breach was discovered medical files of…
Mid-Michigan Physicians Announce Data Breach
The radiology center of Mid-Michigan Physicians-managed by McLaren Medical Group-has announced today that they have experienced a breach of protected health information (PHI). They have…
Lost Laptop Leaves Patients Vulnerable to Data Breach
A decommissioned laptop computer previously used by the Mann-Grandstaff VA Medical Center (MGVAMC) in Spokane, WA, has been discovered to be missing. The laptop is…
Former Employee Accessed PHI of Over 1,100 Patients “Out of Curiosity”
Our Lady of the Angels Hospital has announced the discovery of a breach of patient protected health information (PHI). The breach occurred when a former…
PHI Used for Market Research without Consent
Recently, the MS Center of Saint Louis and Mercy Clinic Neurology Town and County have announced that they have breached HIPAA regulations. Over one-thousand patients…
Former Hospital Employee Breaches HIPAA by Emailing PHI
Yolanda Farrar-former employee of the Arkansas Department of Human Services (DHS)-has been fired from her position at the state hospital for breaching HIPAA legislation in…
Hospital Staff Who Shared Photos of a Patient’s Injuries Guilty of Privacy Violations
The University of Pittsburgh Medical Center’s Bedford Memorial hospital has announced that an incident occurred at the facility which was in violation of HIPAA legislation….
Salina Family Healthcare Reports Ransomware Attack
Salina Family Healthcare, based in Kansas, has announced that they were subjected to a ransomware attack earlier this year. They stated that the ransomware was…
Nearly 300,000 Patients Affected by Ransomware Attack
Women’s Health Care Group of Pennsylvania has announced that they have been subject to a data breach. The organisation states that the breach was noticed…