A collection of 24 posts
A $4.3 Million Settlement Started with One Untrained Employee In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop and
A hospital billing clerk copies a spreadsheet of patient names, Social Security numbers, and diagnosis codes onto a USB drive to finish work at home.
A $4.3 Million Penalty Started With One Missing Safeguard In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing
A Single Misrouted Fax Cost This Clinic $125,000 A small physician practice in Tennessee faxed a patient's lab results to a local
A $4.3 Million Penalty That Started with a Missing Safeguard In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop
A Single Fax to the Wrong Number Cost One Health System $4.3 Million In 2016, Advocate Health Care Network agreed to a $5.55
A medical billing company in Tennessee assumed the HIPAA Security Rule didn't apply to them. They weren't a hospital. They weren&
A Single Stolen Laptop Started a $4.3 Million Nightmare In 2014, a workforce member at MD Anderson Cancer Center lost an unencrypted laptop containing
A compliance officer at a midsize cardiology practice once told me she'd spent $4,200 on a "HIPAA security certification" for
A mid-size pediatric health network migrated to a popular cloud platform in 2022. They configured the servers, encrypted the data at rest, and assumed they
A radiology practice in Tennessee got hit with a $3 million penalty because they let a former employee keep access to a cloud server holding
In February 2023, Banner Health paid $1.25 million to settle allegations that it failed to conduct an enterprise-wide risk analysis — a core requirement of
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.