HIPAA News Updates

New HIPAA Regulations in 2021

• Posted on 7th January 2022

Although the changes to HIPAA regulations in 2021 were not much, new laws were introduced that are associated with the HIPAA Privacy and Security Rules, with regards to cybersecurity, patient access to medical information, and HIPAA enforcement. 2021 HIPAA Safe…

Chicago Accountancy Company Discovers Stolen Data in December 2020 Cyber Attack

• Posted on 16th December 2021

The accountancy company Bansley and Kiener LLP located in Chicago, IL has reported that it experienced a ransomware attack in December 2020 that permitted the encryption of certain files inside its network. The attack merely brought about brief interruption, and…

Healthcare Employees in Minnesota Took Legal Action Against Employers to Stop Vaccine Mandate

• Posted on 1st October 2021

A lawsuit was filed in the U.S. District Court in Minnesota by 180 healthcare employees concerning the COVID-19 vaccine mandates of their company owners. The plaintiffs, who were anonymous in the lawsuit, assert vaccine mandates violate religious freedom and state…

HIPAA Violation News

New Mexico Hospital Faces Class Action Lawsuit Due to 2020 Data Breach

• Posted on 9th December 2021

A class-action lawsuit has been filed against San Juan Regional Medical Center located in Farmington, New Mexico over a reported data breach in June 2021. Based on the breach investigation, an unauthorized person acquired access to its system and exfiltrated…

HHS’ Office for Civil Rights Reports 5 Financial Fines for HIPAA Right of Access Violations

• Posted on 2nd December 2021

The HHS’ Office for Civil Rights (OCR) is moving forward with its enforcement of the HIPAA Right of Access compliance and has reported 5 more financial penalties. The HIPAA Right of Access enforcement project was started in the autumn of…

UPMC Hacker Sentenced With 7-Year in Prison

• Posted on 22nd October 2021

The hacker responsible for getting access to the University of Pittsburgh Medical Center (UPMC) databases and stole the W-2 details and personally identifiable information (PII) of roughly 65,000 UPMC workers has been given the maximum sentence for the offenses and…

Healthcare Cybersecurity News

Log4j Version Three to Solve High Severity DoS Vulnerability

• Posted on 13th January 2022

The original vulnerability determined in Log4j (CVE-2021-44228) that stunned the world thanks to its seriousness, ease of exploitation, and the magnitude of its effect on the software programs and cloud solutions, is not the only vulnerability present in the Java-based…

Patient Information Stolen During a Cyberattack on the Medical Review Institute of America

• Posted on 30th December 2021

The Medical Review Institute of America (MRoiA) encountered a supposed ransomware attack last November 2021 that led to the stealing of sensitive patient information. MRoiA is granted access to patient data by HIPAA-covered entities because of the clinical peer evaluation…

PHI of 57,000 TriValley Primary Care Patients Potentially Compromised in Cyberattack

• Posted on 25th November 2021

TriValley Primary Care based in Perkasie, PA has started sending notifications to 57,596 patients regarding the potential compromise of some of their personal data and protected health information (PHI). Suspicious activity was noticed in its IT system on October 11,…

Healthcare Data Security News

Jefferson Surgical Clinic Reports June 2021 Data Breach with 174,769 Individuals Affected

• Posted on 20th January 2022

Jefferson Surgical Clinic in Roanoke, VA has started informing patients concerning the potential compromise of some of their protected health information (PHI) because of a cyberattack that was discovered on June 5, 2021. As per the breach notification letter sent…

PHI of About 400,000 Monongalia Health Patients Possibly Compromised in BEC and Phishing Attack

• Posted on 23rd December 2021

Monongalia Health System based in Morgantown, WV has started alerting about 400,000 patients that unauthorized individuals may have obtained some of their protected health information (PHI) in a recent cyberattack. Monongalia Health System discovered the security incident only when one…

Maxim Healthcare Group Informs 65,000 People Regarding October 2020 Email Breach

• Posted on 11th November 2021

Maxim Healthcare Group based in Columbia, MD has begun informing 65,267 people concerning a historic breach of its email system and the compromise of their protected health information (PHI). Maxim Healthcare Group, which consists of Maxim Healthcare Staffing and Maxim…