The HIPAA Journal

MARCH 24, 2025

In 2023, the company was hit with a damaging data breach. users of the 23andMe service have a degree of protection under the Genetic Information Nondiscrimination Act (GITA), as their genetic data cannot be used to make employment or health insurance decisions but there may be other ways that their data could be used.

Tests 83

Tests HIPAA Insurance 83

The HIPAA Journal

MARCH 20, 2025

The HIPAA Journal has compiled healthcare data breach statistics from October 2009, when the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) started publishing summaries of healthcare data breaches on its website. On January 22, 2023, the breach portal listed 857 data breaches as still; under investigation.

Business Associate 111

Business Associate HIPAA Unit Organization and Environment Hospital 111

The HIPAA Journal

MAY 2, 2024

Data Breach Insights Healthcare accounted for 28% of data breach incidents, followed by finance and insurance (17%), business and professional services (15%), and education (13%). 27% of attacked companies paid a ransom in 2023, compared to 40% in 2022. million in 2023. The was a significant increase in data breaches at vendors.

HIPAA 117

HIPAA Follow-Up Certification Business Associate 117

The HIPAA Journal

APRIL 25, 2024

City of Hope National Medical Center identified suspicious activity within its network on October 13, 2023, and the forensic investigation confirmed there had been unauthorized access by a third party between September 19, 2023, and October 12, 2023.

Medication 120

Medication HIPAA Medical History Best Practices 120

The HIPAA Journal

APRIL 17, 2025

The first unauthorized access occurred in February 2021 and continued until February 2023. In addition, the files accessed by the former employee contained names, contact information, dates of birth, health insurance information, and Social Security numbers. The lawsuit seeks a jury trial and compensatory and punitive damages.

Patient Records 49

Patient Records HIPAA Hospital Insurance 49

The HIPAA Journal

JULY 4, 2024

SkinCure Oncology has notified 13,434 patients about an email attack that occurred in June 2023, and the Wisconsin Department of Health Services has announced a breach of the personal information of 19,150 Medicaid recipients. SkinCure Oncology believes files in those email accounts were viewed and potentially obtained in the attack.

Medical History 120

Medical History HIPAA Insurance Medication 120

The HIPAA Journal

APRIL 29, 2024

Berry, Dunn, McNeil & Parker, LLC (BerryDunn) provides health data analytics services to healthcare providers, health insurers, and government regulatory and healthcare policy agencies and its clients provide BerryDunn with personal and health data to allow the firm to perform its contracted services.

HIPAA 116

HIPAA Insurance Medication 116

The HIPAA Journal

APRIL 22, 2024

University of Wisconsin Hospitals and Clinics Authority Email Account Breach The University of Wisconsin Hospitals and Clinics Authority (UW Health) recently provided an update on a security incident that was detected in late 2023. 20, 2023, and Dec. 20, 2023, and Dec.

Medication 117

Medication HIPAA Hospital Billing 117

The HIPAA Journal

MARCH 19, 2025

An investigation was launched which revealed an unauthorized third party had access to the email account for 2 months since November 6, 2023, and other email accounts may also have been accessed. The post Email Account Breaches Reported by Access TeleCare & Madison County, MS appeared first on The HIPAA Journal.

HIPAA 75

HIPAA Documentation Insurance Medication 75

The HIPAA Journal

JULY 5, 2024

The nature of the access was not disclosed; however, Providence said there is an active investigation by the California Department of Insurance. The review confirmed that only names, State IDs, driver’s license numbers, and health insurance coverage information were accessed.

HIPAA 120

HIPAA Patient Records Insurance Hospital 120

The HIPAA Journal

JULY 5, 2024

An investigation was launched which determined that between November 2, 2023, and March 29, 2024, the vendor accessed and downloaded information from a Kairos database. The post Protected Health Information Stolen in HealthEquity SharePoint Breach appeared first on The HIPAA Journal.

HIPAA 122

HIPAA Insurance Medication 122

The HIPAA Journal

APRIL 25, 2024

OPMT said, “Even though it is not specifically required by HIPAA, we will offer identity theft protection services to all affected individuals; we feel that this is an important precaution to protect our patients.” On October 26, 2023, Advarra discovered suspicious activity in an employee’s user account.

HIPAA 112

HIPAA Insurance 112

The HIPAA Journal

JULY 9, 2024

SouthCoast Health and Privia Medical Group in Georgia have notified patients about a cyberattack and data breach that occurred in June 2023. The post SouthCoast Health; Call 4 Health Notify Patients About Cyberattacks appeared first on The HIPAA Journal. During that time, files on the network were viewed or copied.

Triage 123

Triage HIPAA Documentation Billing 123

The HIPAA Journal

JULY 3, 2024

They confirmed that an unauthorized actor gained access to its network on October 8, 2023, and maintained access until the breach was detected. The post Texas Retina Associates Cyberattack Affects 312,000 Patients appeared first on The HIPAA Journal.

HIPAA 126

HIPAA Hospital Insurance Medication 126

The HIPAA Journal

APRIL 29, 2024

The Health Breach Notification Rule applies to vendors of personal health records (PHRs) and related entities that are not covered by HIPAA and requires them to notify individuals in the event of a breach of unsecured personally identifiable health data, and in some cases, also notify the media.

HIPAA 114

HIPAA Insurance Communication 114

Health Prime

JANUARY 22, 2025

Department of Health and Human Services (HHS) released a Notice of Proposed Rulemaking (NPRM) to modify the Health Insurance Portability and Accountability Act (HIPAA) Security Rule of 1996. This is the first HIPAA Security rule update since 2013. From 2018-2023, reports of significant breaches increased by 102%.

HIPAA 52

HIPAA Business Associate Best Practices Insurance 52

The HIPAA Journal

APRIL 26, 2024

The breach was detected on June 20, 2023, and it was determined that patient data may have been accessed or acquired by the unauthorized third party, although no specific evidence of data access or data theft was identified. County Department of Health Services Email Accounts appeared first on HIPAA Journal.

Business Associate 120

Business Associate HIPAA Tests Medication 120

Health Populi

FEBRUARY 27, 2024

That’s the mantra coming out of this week’s annual Capitol Conference convened by the National Association of Benefits and Insurance Professionals (NABIP). FYI you might know of NABIP by its former acronym, NAHU, the National Association of Health Underwriters).

Billing 141

Billing Insurance Hospital HIPAA 141

The HIPAA Journal

NOVEMBER 7, 2024

The use of ransomware in cyberattacks decreased slightly in the first half of the year; however, the severity of ransomware attacks increased according to the 2024 Cyber Claims Report: Mid-Year Update from cyber insurance and security service provider Coalition. Other incidents accounted for 23% of claims, down 10% from H2, 2023.

Follow-Up 97

Follow-Up Insurance Transfers HIPAA 97

Healthcare Law Insights blog

JANUARY 15, 2025

This marks the first update to the HIPAA Security Rule since 2013. From 2018-2023, OCR observed a 102% increase in breaches affecting 500 or more individuals, with 167 million affected in 2023 alone. These changes aim to address the steadily increasing risk of cyberattacks on critical healthcare infrastructure. population. [1]

HIPAA 52

HIPAA Business Associate Follow-Up Documentation 52

The HIPAA Journal

JULY 5, 2024

Suspicious activity was detected in an employee’s email account on November 3, 2023, and after securing the account, a forensic investigation was launched to determine the nature and scope of the activity. The post Email Breach Affects 22,000 Ambulatory Surgery Center of Westchester Patients appeared first on The HIPAA Journal.

Business Associate 75

Business Associate HIPAA Insurance Patient Records 75

The HIPAA Journal

APRIL 4, 2025

Dameron Hospital Notifies Patients About November 2023 Data Breach Dameron Hospital in Stockton, California, has recently sent notification letters to patients about a November 2023 data breach. The post Mercer County Joint Township Community Hospital Cyberattack Affects Up to 88,500 Individuals appeared first on The HIPAA Journal.

Hospital 70

Hospital Follow-Up HIPAA Insurance 70

The HIPAA Journal

NOVEMBER 6, 2024

The types of data involved varied from individual to individual and included names, addresses, dates of birth, driver’s license numbers, Social Security numbers, medical treatment/diagnosis information, and health insurance information. The intrusion was detected on March 9, 2023, when ransomware was used to encrypt files.

Insurance 87

Insurance HIPAA Medication Certification 87

Arkenea

JULY 12, 2024

Medical insurance verification software is developed to automate the process of verifying patients’ insurance coverages. This software is connected to the insurance company’s database to retrieve real-time data on a patient’s insurance status. CDC reveals that 10.9 CDC also reveals that 3.9 In 2022, 92.1

Insurance 52

Insurance EHR / EMR Medication Patient Satisfaction 52

The HIPAA Journal

MARCH 7, 2025

A further hacking incident was experienced in 2021 and was disclosed by Apria Healthcare in May 2023. Hackers had access to its network between August 27, 2021, and October 10, 2021, and potentially viewed or obtained personal, medical, health insurance, and financial information. The post Apria Healthcare Agrees to $6.4M

HIPAA 81

HIPAA Documentation Insurance Medication 81

The HIPAA Journal

MARCH 18, 2025

A settlement has been agreed to resolve multiple Infosys McCamish Systems class action lawsuits that were filed in response to a 2023 ransomware attack and data breach that involved unauthorized access to the personal data of more than 6 million individuals.Infosys is Indias second-largest IT services provider, and Infosys McCamish Systems is a U.S.

HIPAA 82

HIPAA Follow-Up Insurance Medication 82

Health Populi

JULY 24, 2023

In the program’s FAQs, one question clearly addresses this, transparently and in layperson’s terms: Q: “Do I need health insurance to use GNC Health?” ” A: “Nope — insurance isn’t needed or accepted.” Here’s the list of those top-of-mind healthcare worries for U.S.

Insurance 118

Insurance Acute Care Billing HIPAA 118

Valant

JULY 29, 2024

Altered mental status, unspecified (R41.82) is a billable ICD-10 diagnostic code under HIPAA regulations from October 1, 2020, to September 30, 2021. This code is acceptable to insurers when used to describe a marked change in mental health status not attributable to other factors. Check out the 2023 ICD-10 updates here.

Diagnostics 97

Diagnostics HIPAA Insurance Medication 97

The HIPAA Journal

APRIL 15, 2025

The review is ongoing, so it is not yet possible to determine exactly what data was involved, but it is likely to include names, medical information, and health insurance information. The incident dates back to August 21, 2023, when an employee sent an unencrypted email to the personal email address of an unauthorized recipient.

HIPAA 52

HIPAA Insurance Medication 52

Healthcare Law Insights blog

APRIL 28, 2023

The Department of Health and Human Services (HHS) has announced its plan to end the Federal Public Health Emergency (PHE) for COVID-19 on May 11, 2023. Some of these changes have become permanent or extended beyond the end of the PHE due to Congressional action, while some waivers will expire on May 11, 2023. Reimbursement A.

HIPAA 52

HIPAA Insurance Scheduling Medication 52

The HIPAA Journal

MARCH 11, 2025

Presence Chicago Hospitals Network dba Ascension Resurrection in Chicago, Illinois, was investigated over an incident in April 2023. The patients insurance information was obtained; however, Resurrection failed to obtain an EKG, perform a pain assessment, and obtain a medical history.

Triage 46

Triage Medical History Hospital HIPAA 46

CareerStep

NOVEMBER 14, 2023

The American Medical Association (AMA) reported that as of spring of 2023, the U.S. They’re used for billing and insurance reasons. Think of it as a simplified language for a patient’s medical history, because every doctor and insurance company in the U.S But, what do medical coders and billers do?

Billing 52

Billing Medical Coding Medication Certification 52

Pulmonology Advisor - Practice Management

AUGUST 2, 2024

This prospect gives fresh urgency to questions such as what uses of patient data should be permissible, who should own the data, and how secure the data are against violations of privacy, including those covered by the Health Insurance Portability and Accountability Act (HIPAA). They don’t want an impersonal experience.

HIPAA 52

HIPAA Insurance Collaboration Scheduling 52

Arkenea

AUGUST 16, 2024

So, to avoid this, regulatory bodies have implemented regulations such as HIPAA, FDA, HITRUST, FHIR, and more. HCA Healthcare In July 2023, a Tennessee hospital and clinic operator was breached by threat actors who obtained and removed data from an external storage location containing formatted emails and calendar reminders for patients.

HIPAA 52

HIPAA Patient Records Medical History Clinical Operations 52

Arkenea

JANUARY 25, 2025

Key Takeaways A need to control substance usage and reduce medication errors is driving the e-prescribing market growth during the 2023-2030 timeframe. percent during the 2023-2030 timeframe. HIPAA regulations safeguard ePHI on physical, technical, and administrative levels.

Transfers 52

Transfers HIPAA Medical History Follow-Up 52

CollaborateMD

JANUARY 5, 2024

According to EverHealth , one of the most important considerations is the software “must comply with healthcare regulations and standards, such as HIPAA (Health Insurance Portability and Accountability Act) in the United States, to ensure patient data is protected and privacy is maintained.” This saves time and effort.

Billing 52

Billing Medication Follow-Up Insurance 52

Arkenea

OCTOBER 10, 2024

Incorporate privacy measures such as HIPAA compliance to safeguard healthcare data against potential cyber-attacks. As per the HIPAA Journal, healthcare data breach statistics clearly show that there has been an upward trend in data breaches over the past 14 years.

HIPAA 52

HIPAA Tests Transfers Patient Satisfaction 52