Practical articles on HIPAA rules, HITRUST certification, enforcement, and healthcare data protection.
Breach NotificationWhen a hacker accesses your servers and compromises Protected Health Information (PHI) , you ll face a critical decision: negotiate an early settlement or defend your security practices in court. The
Breach NotificationYou ve hardened your perimeter, run quarterly vulnerability scans, and have a vendor risk management program. So you re protected from class action litigation after a breach, right? Not even close. Th
Breach NotificationThe Conventional Wisdom When a Business Associate suffers a massive breach, compliance teams often feel secure if they have a signed Business Associate Agreement (BAA). The thinking is: we ve done our
Regulatory FrameworkA phishing email cost Ambry Genetics $700,000 in regulatory penalties and $12.25 million in lawsuit settlements. The breach exposed 225,370 individuals ePHI over three days in January 2020. However, t
Get weekly security insights and compliance updates delivered to your inbox.
Breach NotificationYou ve secured your network, trained your staff on phishing, and passed your last Security Rule risk analysis. Then your vendor gets compromised, and you re notifying 28,000 patients anyway. That s wh
Breach NotificationScope This guide outlines the legal and operational steps your organization must take when a data breach leads to class action litigation. You ll learn about the regulatory framework, timeline require
OCR Enforcement & PenaltiesThe Vastaamo breach is one of healthcare s most devastating cyberattacks. A hacker stole psychotherapy records of 33,000 people, published 300 patients therapy notes online, and extorted individual vi
Individual RightsA ransomware attack doesn t end when you restore your systems. DaVita s $15 million settlement following an April 2025 incident that exposed information belonging to nearly 2.4 million people shows ho
Breach NotificationYou ve signed the business associate agreement. Your vendor passed the initial security questionnaire. You re confident that the third party managing your legacy EHR data won t become a liability. The
Breach NotificationThe common belief is that settling data breach lawsuits is a smart business move. It avoids lengthy litigation, caps exposure, and allows you to move on. Central Maine Medical Center and Susan B. Alle
Breach NotificationContext: Questions from the Front Lines These questions arise from real conversations with business associate compliance teams following the AdaptHealth breach disclosure. When a social engineering at
Breach NotificationHealthcare organizations often practice breach response procedures, conduct tabletop exercises, and maintain incident response plans. Yet, operational failures still appear in settlement after settlem
Breach NotificationScope This guide focuses on the technical controls and operational practices your team needs to implement in response to the 239% increase in hacking-related healthcare data breaches from January 2018
Breach NotificationIn June 2026, 66 large healthcare data breaches affected at least 4,499,972 individuals. The numbers tell a clear story: hacking incidents at Business Associates now dominate, accounting for 81.8% of
Breach NotificationA four-hour window. That s all it took for an unauthorized person to access an employee email account at Integrative Emergency Services and view Protected Health Information (PHI). The company detecte
Breach NotificationWhen a cancer treatment device maker like Novocure becomes the target of a data extortion gang, it shows that your organization s size and specialization won t protect you. Novocure discovered unautho
Breach NotificationWhen American Addiction Centers (AAC) disclosed their second data breach in two years, this time through a Business Associate s Salesforce environment, the incident report contained a telling detail:
Breach NotificationUnderstanding the Impact of Breach Settlements When MCNA settled its class action lawsuit for a 2023 data breach affecting 8.9 million individuals, compliance officers were eager to understand the imp
Breach NotificationWhen ransomware locks your systems, you re faced with a decision that has immediate financial, operational, and compliance consequences. You need a framework before the attack happens, not while your
Breach NotificationThe breach at Aesto Health wasn t just a cloud issue. It was a single AWS compromise that affected over two dozen healthcare providers, exposing data for more than 9.5 million patients. When you outso
