A collection of 18 posts
A radiology practice in Tennessee lost a single unencrypted laptop in 2014. That one device — left in a car overnight — exposed the protected health information
A $4.3 Million Penalty Started With One Missing Safeguard In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing
A $4.3 Million Penalty That Started with a Missing Safeguard In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop
A radiology practice in Tennessee got hit with a $3 million penalty because they let a former employee keep access to a cloud server holding
In 2023, OCR settled with a healthcare system for $1.3 million after an investigation revealed that a single misconfigured server — one that the IT
In 2023, OCR settled with a healthcare provider for $1.3 million after an investigation revealed the organization had failed to implement even basic technical
When OCR settled with Premera Blue Cross for $6.85 million in 2020, the root cause wasn't a single missing firewall or an
In 2023, OCR settled with a health system for $1.3 million after investigators found the organization had failed to implement even basic access controls
When OCR investigated Premera Blue Cross in 2020, the resulting $6.85 million settlement exposed failures across every category of protection the HIPAA Security Rule
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole electronic protected health information (ePHI) of
In 2023, OCR settled with a healthcare system for $1.3 million after investigators found the organization had failed to implement even basic safeguards for
In 2023, OCR settled with a health system for $1.3 million after investigators found the organization had failed to implement basic access controls on
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.