Practical articles on HIPAA rules, HITRUST certification, enforcement, and healthcare data protection.
Breach NotificationDetect Unauthorized PHI Access Before It s Too Late You need to detect unauthorized access to PHI before the OCR does. This alert configuration template helps you set up automated monitoring rules to
Breach NotificationYou re two days into a long weekend when the call comes: an employee clicked a link in what looked like a routine email from a trusted vendor. By the time your security team flagged the anomaly, an un
Breach NotificationYou ve just received a breach notification from one of your Business Associates . Or maybe you re reviewing your vendor list and wondering which relationships deserve immediate attention. Either way,
Breach NotificationTwo SQL injection attacks in one country. Nearly 24 million patient records exposed. The same threat actor claiming credit for both breaches. If your organization runs on third-party medical software,
Get weekly security insights and compliance updates delivered to your inbox.
Breach NotificationThe Problem: Why This Matters Now You ve got a cybersecurity incident. Maybe your SIEM flagged unusual network activity, a vendor called with bad news, or your forensic team just confirmed unauthorize
Breach NotificationThird parties now account for 32% of healthcare breaches, according to Verizon s 2026 Data Breach Investigations Report . Seven of the ten largest breaches in the first half of 2026 involved a busines
Breach NotificationThese questions landed in my inbox last week after news broke that Ambry Genetics agreed to pay a $700,000 HIPAA fine for a 2020 phishing incident that exposed the information of 225,000 patients. The
Breach NotificationThe Labcorp settlement with 44 state attorneys general answers this question the hard way: after costs $2,287,455, plus whatever you spend implementing the mandated security program. The 2019 AMCA bre
Breach NotificationThe Challenge OneTouchPoint Corp., a Wisconsin-based printing and mailing services vendor, discovered encrypted files on its network on April 28, 2022. A forensic investigation traced the intruder s f
Breach NotificationWhat the Data Shows Between December 2025 and September 2026, four healthcare organizations disclosed data breaches that revealed a troubling pattern: the gap between detection and notification often
Breach NotificationWhen a hacker accesses your servers and compromises Protected Health Information (PHI) , you ll face a critical decision: negotiate an early settlement or defend your security practices in court. The
Breach NotificationYou ve hardened your perimeter, run quarterly vulnerability scans, and have a vendor risk management program. So you re protected from class action litigation after a breach, right? Not even close. Th
Breach NotificationThe Conventional Wisdom When a Business Associate suffers a massive breach, compliance teams often feel secure if they have a signed Business Associate Agreement (BAA). The thinking is: we ve done our
Breach NotificationYou ve secured your network, trained your staff on phishing, and passed your last Security Rule risk analysis. Then your vendor gets compromised, and you re notifying 28,000 patients anyway. That s wh
Breach NotificationScope This guide outlines the legal and operational steps your organization must take when a data breach leads to class action litigation. You ll learn about the regulatory framework, timeline require
Breach NotificationYou ve signed the business associate agreement. Your vendor passed the initial security questionnaire. You re confident that the third party managing your legacy EHR data won t become a liability. The
Breach NotificationThe common belief is that settling data breach lawsuits is a smart business move. It avoids lengthy litigation, caps exposure, and allows you to move on. Central Maine Medical Center and Susan B. Alle
Breach NotificationContext: Questions from the Front Lines These questions arise from real conversations with business associate compliance teams following the AdaptHealth breach disclosure. When a social engineering at
Breach NotificationHealthcare organizations often practice breach response procedures, conduct tabletop exercises, and maintain incident response plans. Yet, operational failures still appear in settlement after settlem
Breach NotificationScope This guide focuses on the technical controls and operational practices your team needs to implement in response to the 239% increase in hacking-related healthcare data breaches from January 2018
