HIPAA/HITECH

Article

Texas AG Hopes to Upend HIPAA Rules to Investigate Abortions

Marianne Kolbasuk McGee • September 6, 2024

Texas Attorney General Ken Paxton is suing the Biden administration, alleging that "unlawful" HIPAA Privacy Rule regulations are hindering the state's law enforcement investigations into abortion cases and other reproductive health care cases.

Article

RansomHub Claims Theft of Montana Planned Parenthood Data

Marianne Kolbasuk McGee • September 5, 2024

Planned Parenthood of Montana, which provides patients with reproductive healthcare services including birth control and abortion, is responding to a hack and a threat by cybercriminal group RansomHub to leak 93 gigabytes of data allegedly stolen from the organization.

Article

HHS OCR Drops Appeal of Court's Web Tracker Ruling

Marianne Kolbasuk McGee • September 4, 2024

The Department of Health and Human Services has dropped its appeal of a recent federal court decision saying that HHS exceeded its authority in warning HIPAA-regulated entities that it's unlawful to use online tracking tools to capture certain identifiers in user visits to health-related websites.

Article

Radiology IT Vendor Hack Hits 4 Practices, 411,000 People

Marianne Kolbasuk McGee • September 3, 2024

A vendor that provides information systems and transcription services to radiology practices is alerting 411,037 people of a hack discovered last December involving the theft of sensitive data. The firm already faces at least four proposed federal class action lawsuits related to the hack.

Article

CISA and HHS Would Team Up in Health Sector Under House Bill

Marianne Kolbasuk McGee • August 30, 2024

A bipartisan House bill aims to bolster cybersecurity in the healthcare sector by requiring stronger collaboration between CISA and the Department of Health and Human Services. The bill is a companion to nearly identical bipartisan legislation introduced in the Senate in July.

Article

Florida Department of Health Informs RansomHub Hack Victims

Marianne Kolbasuk McGee • August 29, 2024

Two months after RansomHub claimed to have published 100GBs of its stolen data on the dark web, the Florida Department of Health is notifying citizens that their sensitive information has been compromised. The attack affected the vital statistics system used to issue birth and death certificates.

Webinar

Live Webinar | Building a More Resilient Healthcare Enterprise and Ecosystem

Heather M. Costa, MPS, CBCP, CCRP, Director of Technology Resilience, Mayo Clinic , Jackie Mattingly, CHPS, HCISPP, CHISL, CISSP, Senior Director, Consulting Services, Clearwater , Angie Santiago, CBCP Manager, Consulting Services – Resiliency Solutions, Clearwater • August 29, 2024

From attacks on hospitals that have disrupted operations for weeks to attacks on suppliers that have halted the critical flow of blood across an entire region of the country and the flow of financial information across much of the industry, healthcare's resiliency has been put to the test in a very profound way this...

Article

Nothing to Smile About: Hacks on Dental Practices Swell

Marianne Kolbasuk McGee • August 28, 2024

Some dentists don't have much to smile about these days when it comes to cyberattacks. More than 1.2 million of their patients have had their sensitive data compromised in at least two dozen hacks and other breaches so far in 2024, including several incidents reported in the past month.

Article

Small Rural Alabama Hospital Reports Big 2023 Hacking Breach

Marianne Kolbasuk McGee • August 26, 2024

A small rural Alabama hospital is notifying more than 61,000 patients that their sensitive information was potentially compromised in an October 2023 hacking incident. Why the many months-long delay in notifying regulators and affected individuals?

Article

Feds to Health Sector: Don't Skimp on Physical Security

Marianne Kolbasuk McGee • August 23, 2024

Despite the endless barrage of cyberattacks hitting the healthcare sector, HIPAA-regulated entities must not neglect their duty to protect electronic patient information against physical threats, including burglaries and natural disasters, U.S. regulators said.

Article

Florida-Based Drug Testing Lab Says 300,000 Affected in Hack

Marianne Kolbasuk McGee • August 19, 2024

Florida drug testing medical laboratory American Clinical Solutions told federal regulators that 300,000 individuals are caught up in a hacking incident now that criminal gang RansomHub has published 700 gigabytes worth of data stolen from the lab's network.

Article

Enterprise Browser Supporting Healthcare, Cyber Resilience

Michael Novinson • August 19, 2024

Mike Fey, Co-Founder & CEO of Island, highlights how the enterprise browser's adoption has surged across sectors. He delves into new use cases, including resilience, healthcare and inter-company collaboration, emphasizing the importance of security and productivity in dynamic environments.

Article

Officials Warn of Risks as McLaren Recovers From Attack

Marianne Kolbasuk McGee • August 15, 2024

As McLaren Health Care continues to restore its IT systems in the wake of a ransomware attack last week, some Michigan government officials are warning consumers about potential cybercrimes and other concerns stemming from that and similar cyber incidents involving healthcare groups in the state.

Article

3 State AGs Fine Biotech Firm $4.5M for 2023 Hack

Marianne Kolbasuk McGee • August 14, 2024

New York-based biotechnology firm Enzo Biochem will pay $4.5 million in state fines and must implement a list of security improvements, thanks to a 2023 ransomware attack that affected 2.4 million patients nationwide. Investigators highlighted the company's failure to fix known security risks.

Article

Rhysida Claims Major Data Theft From 2 More Health Systems

Marianne Kolbasuk McGee • August 9, 2024

Ransomware group Rhysida is shaking down at least two new victims in the healthcare sector - Bayhealth and Community Care Alliance - threatening to sell or dump patients' sensitive health and personal information on the dark web. Bayhealth confirmed that it is investigating a recent cyberattack.