Data Privacy

Healthcare Data Breach in IL Exposes COVID-19 Vaccination Status 

by Lisa Gentes-Hunt

The Lake County Health Department and Community Health Center (LCHD) in Illinois is currently notifying over 700 individuals impacted by a recent healthcare data...

New CISA PrintNightmare Order Spurs Health IT Security Concern

by Lisa Gentes-Hunt

The Cybersecurity and Infrastructure Security Agency (CISA) issued an Emergency Directive on PrintNightmare July 13th, raising concerns for health IT security...

Cardinal Contracting Data Breach Includes Medical Information

by Lisa Gentes-Hunt

Cardinal Contracting is notifying 4,519 people nationwide who have been impacted by a recent data breach that exposed personal data,...

Cyberattack Exposes Protected Health Information of 43K New Yorkers

by Lisa Gentes-Hunt

Over 43,000 patients are being notified after a cyberattack on NYC Health + Hospitals exposed private data, which included Protected Health Information...

California Updates Health Facility Data Breach Requirements 

by Lisa Gentes-Hunt

California is tightening up its health facility data breach regulations and recently issued an update to its administrative penalties and reporting requirements.  The newly...

Connecticut’s Updated Cybersecurity Law Now Protects Patient Data 

by Lisa Gentes-Hunt

A newly signed Connecticut cybersecurity law will now allow for the protection of patient data and other private health information.  An Act Concerning Data Privacy...

OIG: Gaps in CMS ERM Puts Genomic Data Security at Risk 

by Lisa Gentes-Hunt

A newly released report is pointing out a flaw with CMS Enterprise Risk Management processes that leaves genomic data security liable.  The Department of Health and...

Colorado Governor Signs The Colorado Privacy Act Into Law  

by Lisa Gentes-Hunt

Colorado Governor Jared Polis signed the Colorado Privacy Act (CPA) into law on July 8, adding protections for Colorado consumer’s data and...

IRS: Cyberthief Sentenced to Prison After Stealing Patients PHI 

by Lisa Gentes-Hunt

A Texas mas was sentenced to prison on July 8 for stealing patients' private health information and going on shopping sprees, among other crimes, according...

Data Breach Impacts Patients, Employees of Dermatology Practice  

by Lisa Gentes-Hunt

Patients and employees of Forefront Dermatology, S.C., may have had their private information exposed during a recent cyberattack.   The data breach...

HHS Warns Health PACS: Patient Data Vulnerable to Cyber Exploitation 

by Lisa Gentes-Hunt

Health PACS are vulnerable to hackers that could expose millions of patients' private health information, according to a new alert from the Department of Health &...

Report Draws Patient Privacy Concern with Prenatal Test

by Lisa Gentes-Hunt

A globally used, prenatal test is being used by a Chinese company to collect patient data, according to a new Reuters report.   The exclusive Reuters report,...

Data Breach Exposes One Medical Customer Email Addresses

by Lisa Gentes-Hunt

Customers of One Medical, a direct paid, membership-based primary care practice, inadvertently had their email addresses shared with fellow customers.  “We are...

Mississippi’s Coastal Family Health Center Falls Victim To Hacker, PHI Exposed

by Lisa Gentes-Hunt

The Mississippi-based Coastal Family Health Center (CFHC) is investigating a hacking attempt that tried to shut down the hospital’s computer...

Northwestern Memorial HealthCare Latest Victim of Elekta’s PHI Data Breach

by Lisa Gentes-Hunt

Chicago’s Northwestern Memorial HealthCare is the latest hospital system to fall victim to Elekta’s recent data breach, exposing oncology patients’ protected health information...

DoD: Staff Need Healthcare Privacy, Cloud Security Certifications

by Jill McKeon

The US Department of Defense (DoD) will now require certain incoming cybersecurity staff to complete two additional (ISC)² certifications focused on healthcare privacy and cloud security. The...

Ohio Hospital HIPAA Violation Goes Unnoticed for Over a Decade

by Jill McKeon

Aultman Health Foundation in Ohio announced the termination of an unnamed employee who committed a HIPAA violation that put patient EHRs and personally identifiable information (PII) at risk. For over...

KLAS: Top Healthcare Security, Privacy Consulting Firms

by Jill McKeon

In a new KLAS report, researchers aimed to separate perceptions from reality by determining what makes a healthcare security and privacy consulting firm a true partner. Researchers spoke to over 70...

Health Data Security a Staple of Holy Name’s Vaccine Record System

by Jill McKeon

Holy Name Medical Center in New Jersey announced a partnership with global security firm SICPA to protect health data security while providing a vaccination record platform for individuals who receive...

Renown Health Falls Victim to Elekta Data Breach, PHI Exposed

by Jill McKeon

Renown Health in Nevada announced that its patients’ protected health information (PHI) was exposed through an April data breach of its business associate, Elekta. Over 40 other health systems...