A collection of 91 posts
A single misconfigured EHR server exposed the protected health information of 3.9 million patients at Advocate Medical Group — and cost the organization $5.55
A front-desk employee at a cardiology clinic in Texas faxed a patient's billing statement to the wrong number. The document included a name,
A hospital in Louisiana lost $480,000 because a single employee snooped through a patient's medical record out of curiosity. Not a hacker.
In 2018, a medical billing company called Advanced Care Hospitalists paid $500,000 to settle with HHS after a business associate they'd hired
A front-desk employee at a Florida clinic bills Medicare for physical therapy sessions that never happened. A physician upcodes patient visits — documenting complex evaluations when
A $4.3 Million Fine Started with a Missing Definition In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing
A cloud storage vendor loses a laptop containing 20,000 patient records. The hospital that hired them gets the breach notification letter. The vendor insists
I once watched a hospital administrator spell it "HIPPA" on a slide deck in front of 200 employees. Nobody corrected her. That moment
A physician in Texas billed Medicare for over 5,000 hours of home health services in a single year. That's roughly 14 hours
A $4.7 Billion Problem Hiding in Your Organization's Blind Spots In 2023, the Department of Justice recovered over $2.68 billion in
Last year, a solo-practice dermatologist in Connecticut called me in a panic. She'd just received a letter from the Office for Civil Rights
A hospital in Texas once faxed a patient's psychiatric records to the wrong physician's office — a solo practitioner across town who
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.