Serving the HIPAA community for over 15 years. https://xitter.cf/t.co/pZzlDpXz37
United States of America
Joined November 2017
- Tweets1.2K
- Following749
- Followers169
- Likes735
A cybersecurity incident at iRhythm Holdings, a San Francisco-based heart-monitoring company, resulted in the theft of patient data. iRhythm is a healthcare technology company that manufactures cardiac monitoring biosensors to detect and diagnose heart arrhythmiass.
Medical virtual assistants face HIPAA risks that arise from accessing PHI outside a healthcare organization’s physical facilities, including screen visibility, overheard conversations, personal communications technology, remote authentication, and local storage
Labcorp has agreed to pay a financial penalty of $2.3 million and strengthen its information security program to settle a multistate investigation of a 2019 data breach at its debt collection company that affected approximately 10.2 million Labcorp patients.
Legislation has been reintroduced by two Democratic senators to strengthen healthcare cybersecurity. The Health Infrastructure Security and Accountability Act was first introduced in 2024 following the cyberattack on Change Healthcare, which caused massive disruption.
Ambry Genetics Settles OCR HIPAA Investigation For $700,000
hipaaguide.net/ambry-genetic…
Data Breach Affects 2.8 Million Patients
hipaaguide.net/baylor-geneti…
Aesto LLC, doing business as Aesto Health, a business associate that provides healthcare data management services and software to HIPAA-covered entities, has experienced a massive data breach affecting more than 9.5 million individuals.
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has announced that another settlement has been agreed to resolve alleged HIPAA violations uncovered during an investigation of a ransomware-related data breach.
The HIPAA Guide retweeted
The global average cost of a data breach has increased to almost $5 million, according to IBM’s 2026 Cost of a Data Breach Study, which shows breach costs have increased in all tracked industry sectors.
hipaaguide.net/2026-cost-hea…
The information that can be shared without violating HIPAA includes any PHI that is used for a permitted purpose and any identifiable information that does not qualify as PHI because it is not maintained in the same designated record set as PHI. hipaaguide.net/what-informat…
There are two main situations in which PHI disclosure is required
A Covered Entity must provide PHI to an individual or their appointed representative in response to a valid access request and PHI must also be provided to OCR during certain investigations, audits, or reviews.
The healthcare AI platform provider Xsolis has announced a major data breach in which the protected health information of almost 1,.4 million patients was exposed.
hipaaguide.net/xsolis-data-b…
Spencer Gifts HIPAA Penalty /hipaaguide.net/spencer-gifts…
ShinyHunters Claims Responsibility For Amazon One Medical Seniors Data Breach
hipaaguide.net/amazon-one-me…
The HIPAA Guide retweeted
Xsolis, a provider of AI-powered case and utilization management solutions to healthcare providers, has experienced a phishing attack that exposed the protected health information of almost 1.4 million patients of its healthcare provider clients.
zurl.co/0LRel
HIPAA Cybersecurity Compliance For Healthcare Organizations
hipaaguide.net/hipaa-cyberse…
Dentaquest Data Breach:
hipaaguide.net/dentaquest-da…
HIPAA training is required as often as is necessary to ensure the privacy of Protected Health Information (PHI) and the confidentiality, integrity, and availability of electronic PHI
hipaaguide.net/how-often-is-…
Threat Group Impersonates IT Support For Remote Access And In-Person Data Theft
hipaaguide.net/silent-ransom…
HIPAA ENFORCEMENT AGENCY ANNOUNCES RESTRUCTURING
hipaaguide.net/hipaa-enforce…
