Common HIPAA violations, enforcement cases, and how to avoid compliance failures
In 2023, a dental practice in Texas received a $50,000 OCR settlement after a staff member texted appointment details — including treatment information — to the
In February 2024, OCR settled with a healthcare system for $480,000 after an investigation revealed that multiple workforce members had accessed patient records without
In 2023, OCR reported that hacking and IT incidents accounted for 79% of all large healthcare data breaches — a staggering figure that would have been
In October 2023, OCR settled with a Louisiana medical group for $480,000 after a phishing attack exposed the protected health information of over 34,
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed catastrophic failures in risk
In 2023, a dental practice in Texas paid a $50,000 settlement to the HHS Office for Civil Rights after an employee texted patient appointment
In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud — and a significant portion of those
If you've encountered the question "the enforcement rule applies to covered entities only — true or false" on a compliance quiz, you
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of 12,
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR determined that three data breaches involving unencrypted
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a workforce member stole the protected health information of over
In February 2023, OCR announced a $1.3 million settlement with Banner Health after a data breach affecting nearly 3 million individuals. The root cause
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.