Data Breaches

Small Healthcare Practices More Vulnerable to Data Breaches, Cyberattacks

by Jill McKeon

Over 20 percent of small healthcare organizations surveyed by Software Advice reported experiencing a data breach. However, 46 percent of those breaches could be blamed on human error. The survey...

Oklahoma City Indian Clinic Cyberattack Causes Pharmacy Disruptions

by Jill McKeon

Oklahoma City Indian Clinic (OKCIC) experienced a cyberattack that has disabled certain pharmacy services indefinitely, a statement on its website explained. A post on the clinic’s Twitter...

Health Plans, Laboratories, Health Departments Hit by Healthcare Data Breaches

by Jill McKeon

Healthcare data breaches continue to impact hospitals and health systems, but cyberattacks at health plans and specialty clinics are also increasing as threat actors set their sights on smaller and...

Senators Introduce Healthcare Cybersecurity Act

by Jill McKeon

Senators Bill Cassidy (R-LA) and Jacky Rosen (D-NV) introduced the bipartisan Healthcare Cybersecurity Act (S.3904), shortly after President Biden warned all critical infrastructure sectors to harden...

Scripps Health Faces Lawsuit Over Kronos Data Breach

by Jill McKeon

Employees proposed a class-action lawsuit against Scripps Health, alleging that the San Diego health system failed to accurately log employee hours in the aftermath of the Kronos data breach in...

NJ Dialysis Center, Neurosurgery Practice Both Face Cyberattacks

by Jill McKeon

Two New Jersey-based healthcare organizations fell victim to separate cyberattacks that potentially resulted in protected health information (PHI) exposure. In 2021, Critical Insight observed a...

Healthcare Cyberattacks Impact Benefit Plans, Safety-Net Clinic

by Jill McKeon

Healthcare cyberattacks continue to plague the sector as threat actors find new targets and tactics. Along with targeting large hospitals, threat actors are increasingly aiming their attacks at smaller...

East Tennessee Children’s Hospital Experiencing Security Issue

by Jill McKeon

East Tennessee Children's Hospital (ETCH) fell victim to an "information technology security issue" on March 13, a notice on its website stated. At the time of publication, the children's...

Labette Health, Capital Region Medical Center Confirm Data Breaches

by Jill McKeon

Both Labette Health and Capital Region Medical Center (CRMC) confirmed healthcare data breaches that occurred late last year. The breaches both resulted in potential protected health information (PHI)...

Logan Health Faces Lawsuit in Wake of Hacking Incident

by Jill McKeon

A victim of a November hacking incident against Logan Health Medical Center recently filed a class-action lawsuit against the Montana medical center, alleging negligence and invasion of privacy. Logan...

CO Hospital Suffers Email Data Breach, 52K Impacted

by Jill McKeon

Colorado hospital Montrose Regional Health fell victim to an email data breach that went undetected from August to October 2021 and impacted 52,632 individuals. In a notice on its website, Montrose...

Duncan Regional Hospital Data Breach Impacts 92K

by Jill McKeon

Oklahoma-based Duncan Regional Hospital (DRH) suffered a data breach in January 2022 that impacted over 92,000 individuals, according to the Maine Attorney General’s Office. The not-for-profit...

Monongalia Health Suffers Second Healthcare Data Breach

by Jill McKeon

West Virginia-based health system Monongalia Health began notifying patients of a healthcare data breach that resulted in unauthorized access to protected health information (PHI). Just a few months...

Houston Health Department Suffers Healthcare Data Breach

by Jill McKeon

The Houston Health Department suffered a data breach on its COVID-19 test results portal. Approximately 3,500 portal users may have had access to 10,000 COVID-19 test results. The results included the...

Montana Medical Center Faces Hacking Incident Impacting 214K

by Jill McKeon

Healthcare data breaches continue to burden the healthcare sector. As geopolitical tensions rise due to Russia’s invasion of Ukraine, the American Hospital Association (AHA) warned that US...

Jackson Hospital Suffers Patient Data Exfiltration Incident

by Jill McKeon

Data exfiltration and improper protected health information (PHI) access were the cause of some recent healthcare data breaches. As data breaches continue to overwhelm the healthcare sector,...

Sea Mar Community Health Centers Faces Lawsuit Over Data Breach

by Jill McKeon

Seattle-based Sea Mar Community Health Centers (SMCHC) is facing a class-action lawsuit over its handling of a 2021 data breach that impacted 688,000 individuals. The lawsuit alleged that SMCHC was...

Deadline to Report PHI Breaches Impacting Less Than 500 People Nears

by Jill McKeon

Under the HIPAA Breach Notification Rule, covered entities must report all protected health information (PHI) breaches to HHS. If the breach impacted more than 500 individuals, covered entities must...

Malware, Employee Email Breaches Result in PHI Exposure

by Jill McKeon

One look at the Office for Civil Rights (OCR) data breach portal shows that hospitals, nonprofits, and small community health centers continue to face healthcare data breaches. Hundreds of thousands...