A collection of 47 posts
A cloud storage vendor loses a laptop containing 20,000 patient records. The hospital that hired them gets the breach notification letter. The vendor insists
A Single Spreadsheet Cost This Health Plan $6.85 Million In 2023, Premera Blue Cross agreed to a $6.85 million settlement with HHS after
A dermatology practice in New England paid a vendor $4,000 for a "comprehensive HIPAA risk assessment." What they got back was a
The Enforcement Hammer Dropped — and Telehealth Was in the Crosshairs In March 2023, HHS OCR announced that the telehealth enforcement discretion period — the pandemic-era flexibility
A receptionist at a dermatology clinic in New England forwarded a spreadsheet of 1,800 patient names and insurance IDs to her personal Gmail account.
A nurse in Tennessee pulls up her ex-husband's medical records after a custody dispute. A front desk worker in Colorado texts a photo
A Single Text Cost This Health System $3 Million In 2018, the University of Rochester Medical Center agreed to a $3 million settlement with OCR
A Nurse, a Hallway, and a $4.75 Million Settlement In 2021, a major health system paid $4.75 million to settle allegations from the
A Stolen Laptop, a Missing Exception, and a $3 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop
A Single Telehealth Claim Triggered a $1.5 Million Investigation A mid-size behavioral health practice in the Southeast thought they had telehealth billing figured out.
A $4.75 Million Fine That Started With One Missing Document In 2023, OCR settled with Lafourche Medical Group for $480,000 after a phishing
A small dermatology practice in New England thought they were covered. They'd signed up for a popular cloud storage service, uploaded thousands of
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.