Provider of the latest news on #HIPAA regulations for healthcare professionals & #compliance officers. Best practice advice and training for HIPAA CEs & BAs.

Dallas, TX
Joined November 2014
Last year, the HHS confirmed that it had started actively enforcing the information blocking regulations. The ONC has recently sent seven letters of nonconformity to health IT companies, most of which have agreed to change their data sharing practices. zurl.co/sXFKX
26
A joint cybersecurity advisory has been issued by CISA, the FBI, and the US Secret Service about the SafePay Ransomware group, which has claimed more than 600 victims across multiple critical infrastructure sectors since August 2024. zurl.co/1pppN
45
Boston Children’s Health Physicians & XTIUM have agreed to pay a combined $2.7 million to resolve alleged violations of HIPAA and state laws that led to a 2024 cyberattack and data breach that affected 890,000 individuals in New York and Connecticut. zurl.co/Q0Qzo
1
1
4
141
Mid Florida Dermatology & Plastic Surgery has announced a data breach affecting more than 85,000 patients. Data breaches have also been reported by Kannarr Eye Care in Kansas and Indiana University Health Affiliated Covered Entity. zurl.co/p0IVx
1
77
A $6.4 million settlement has been agreed to resolve claims against Sonic Healthcare U.S.A., Aurora Diagnostics, Clinical Pathology Laboratories, and Austin Pathology Associates related to the 2018 cyberattack on American Medical Collection Agency. zurl.co/B67VU
1
1
95
Ransomware groups are increasingly resorting to real-world threats against employees and their friends and family members to pressure victims into paying ransoms, including doxxing, swatting, and threats of physical violence. zurl.co/HeknT
1
75
Data breaches have been announced by the New York-based healthcare technology company Photon Health, the Texas-based medical provider network company Healthcare Highways, and the New York-based home health agency Any-Time Home Care. zurl.co/VcdQn
2
2
124
A zero-day authentication vulnerability has been identified in Ivanti Connect Secure remote access gateway that is being actively exploited. The vulnerability can lead to remote code execution on vulnerable appliances. zurl.co/at3XX
1
1
82
Twin Cities Pain Clinic in Minnesota has settled class action litigation arising from a July 2025 data incident that exposed patients’ personal and protected health information and will pay up to $385,000 in cash benefits to the class members. zurl.co/sEJYG
1
1
88
Roseland Community Hospital Association in Illinois has agreed to settle a class action data breach lawsuit for $650,000. The lawsuit was filed in response to a 2024 cybersecurity incident and data breach affecting more than 100,000 individuals. zurl.co/qVSAO
1
1
4
166