Healthcare Information Security

Healthcare Data Breach

42,000 AdventHealth Patients Impacted in Yearlong Data Breach

February 15, 2019 - About 42,000 AdventHealth Medical Group Pulmonary and Sleep Medicine patients are being notified that their personal and health data was breached for more than a year due to a hack of the Florida provider’s systems. On December 27,2018, officials discovered a hacker gained access to AdventHealth systems. However, access to those systems began more than 16 months later in August...


More Articles

Hackers Attempt to Extort Ontario Healthcare Provider CarePartners

by Jessica Davis

CarePartners experienced a data breach in 2018, and now the hackers are attempting to extort the Ontario-based provider for 5 bitcoins, or about $18,000, to prevent the public release of employee and patient files, according to...

24,000 Patient Records Breached in EyeSouth Partners Email Hack

by Jessica Davis

Georgia-based EyeSouth Partners recently began notifying 24,113 patients that their protected health information was potentially compromised after an employee email hack. On October 25, officials discovered an individual gained...

Phishing Hack Breaches PHI of 23,000 Colorado Patients for 3 Months

by Jessica Davis

Colorado-based Critical Care, Pulmonary & Sleep Associates recently notified 23,000 patients that their personal data was potentially breached during a phishing attack. On November 23, CCPSA officials discovered a hacker gained access...

Phishing Attack on Verity Health Breaches Patient Data

by Jessica Davis

Verity Health System and Verity Medical Foundation are notifying patients that their data was potentially breached by two separate phishing attacks. According to officials, one cyberattack occurred in November and the other in...

Alaska Bungles Breach Notification, 87,000 Patients Impacted

by Jessica Davis

The Alaska Department of Health and Social Services recently updated its breach notification to include substantially more patients than were included in its initial announcement from June 2018. But in the process, those estimates also...

Months-Long Phishing Attack on Rehab Center Breaches Patient Data

by Jessica Davis

Memphis-based Sacred Heart Rehabilitation Center recently began notifying patients that their personal data was potentially breached due to a phishing attack. Officials discovered the hacker gained access to an employee email account...

Email Hack on Vermont Provider Breaches 32,000 Patient Records

by Jessica Davis

Elizabethtown Community Hospital, part of the University of Vermont Health Network, notified about 32,000 patients that their personal health information was breached during an email hack. On October 18, hospital officials discovered an...

30 Percent of Online Health Databases Expose Patient Data

by Jessica Davis

About 30 percent of online healthcare databases are left exposed online due to misconfiguration, according to a recent report from IntSights. The researchers scoured the internet to determine how easy it would be for a hacker to access...

EmblemHealth Fined $100K for 2016 Healthcare Data Breach

by Jessica Davis

New Jersey Attorney General Gurbir Grewal fined health insurance vendor EmblemHealth $100,000, for its 2016 health data breach of more than 6,000 New Jersey residents. The New York-based insurer’s subsidiary Group Health is also...

12 States Sue Business Associate for 2015 Health Data Breach

by Jessica Davis

A dozen states have filed a Federal lawsuit against Indiana-based Medical Informatics Engineering (MIE) and subsidiary NoMoreClipboard, over a 2015 hack that breached the data of more than 3.9 million patients nationwide. The Attorneys...

42,000 Records Breached in Cancer Treatment Center Phishing Hack

by Jessica Davis

Cancer Treatment Centers of America at Western Regional Medical Center is notifying about 41,948 patients that their personal data was potentially breached by a phishing attack. On September 26, officials discovered an email account was...

DOJ Indicts SamSam Hackers Behind Targeted Ransomware Attacks

by Jessica Davis

The Department of Justice indicted two Iranian hackers behind the targeted and highly successful SamSam ransomware campaign that has plagued the healthcare sector for several years. The federal prosecutors charged Mohammad Mehdi Shah...

SSNs, Tax Data Exposed in Healthcare.gov Health Data Breach

by Fred Donovan

Partial Social Security numbers (SSNs), immigration status, and tax information might have been stolen as a result of the health data breach on the Healthcare.gov portal last month. In October, CMS admitted to a breach of...

Health Data Breach Compromised PHI on 566K CNO Customers

by Fred Donovan

CNO Financial Group reported to OCR on Oct. 25 that a breach compromised PHI on 566,217 individuals. CNO Financial Group’s largest unit, Bankers’ Life, issued a statement describing the breach. The group discovered...

NJ Fines Vendor Behind Virtua Healthcare Data Breach $200K

by Fred Donovan

New Jersey is slapping a $200,000 fine on a defunct Georgia-based medical transcription company that caused the Virtua Medical Group breach impacting more than 1,650 individuals in 2016. The $200,000 fine includes $191,492.00 in civil...

4.4M Records Exposed in 117 Health Data Breaches in Q3 2018

by Fred Donovan

A total of 4.4 million patient records were compromised in 117 health data breaches in the third quarter of 2018, according to the latest Protenus Breach Barometer. These figures compare with 3.15 million records compromised in 142 health...

Ransomware Attack at Iowa Eye Clinic Puts PHI of 40K at Risk

by Fred Donovan

Iowa-based Jones Eye Clinic suffered a ransomware attack that may have compromised personal data on 40,000 patients, the Sioux City Journal reported Oct. 24. Information that might have been exposed included patient full name, address,...

HHS OIG Probes Healthcare.gov Portal Data Breach Affecting 75K

by Fred Donovan

HHS OIG is investigating the Healthcare.gov portal data breach that put personal information on 75,000 individuals at risk. So far, the office has determined that no PHI, banking, or tax information was exposed during the breach,...

Healthcare Takes Around 350 Days to Identify, Contain Data Breach

by Fred Donovan

The healthcare industry had the second highest number of days to identify and contain a data breach, around 350 days, according to a recent study by The Ponemon Institute and IBM. The healthcare industry was second only to the...

X

SIGN UP and gain free access to articles, white papers, webcasts and exclusive interviews on

HIPAA Compliance
BYOD
Cybersecurity
Data Breaches
Ransomware

Our privacy policy


no, thanks

Continue to site...