RyanCoyne
Ryan Coyne is a results-driven leader in the healthcare compliance industry, specializing in regulatory compliance, compliance training, and assisting healthcare organizations and business associates in achieving and maintaining compliance. With a deep knowledge of healthcare regulations and a keen understanding of the challenges faced by the industry, Ryan has developed a reputation as a trusted advisor and advocate for ethical and compliant practices in healthcare. Ryan has successfully advised and guided numerous healthcare organizations, business associates, and healthcare professionals on achieving and maintaining compliance with regulatory training requirements. Ryan's professional focus is using his in-depth expertise and leading a world class team of subject matter experts at ComplianceJunction in regulatory compliance to help organisations navigate the complex landscape of ensuring staff adhere to healthcare regulations. You can connect with Ryan via LinkedIn https://www.linkedin.com/in/ryancoyne/ and follow on Twitter https://twitter.com/ryancoyne
by Ryan Coyne | May 8, 2018 | HIPAA News
Healthcare groups are, more and more, using the cloud to meet their IT requirements, but while there are many benefits to be had from moving applications, infrastructure and data center operations to the cloud, managing cloud costs remains a major Obstacle. Many...
by Ryan Coyne | May 3, 2018 | GDPR Advice
By now, most company owners will have heard more than they want to about the General Data Protection Regulation, commonly referred to as GDPR. Since 25th May 2018, businesses that process personal data relating to data subjects in the European Union (EU) are subject...
by Ryan Coyne | Apr 27, 2018 | Cybersecurity, HIPAA News
The U.S. Food and Drug Administration has released an alert regarding certain Abbott Laboratories implantable cardiac devices that have cybersecurity weaknesses that could possibly be targeted to alter the usability of the devices. A number implantable cardiac...
by Ryan Coyne | Apr 26, 2018 | Cybersecurity
The National Institute of Standards and Technology published an updated version of its Framework for Improving Critical Infrastructure Cybersecurity (Cybersecurity Framework) on April 16, 2018. The Cybersecurity Framework was first made available on February 2014 and...
by Ryan Coyne | Apr 25, 2018 | HIPAA News
Over a period of three and a half years, 1,071 patients of Des Moines Crisis Observation Center, who received medical services at the operated by Polk County Health Services Inc., have been contacted to advise them that some of their protected health information has...
by Ryan Coyne | Apr 24, 2018 | HIPAA News
582,174 patients of the California Department of Developmental Services (DDS) is contacting customers to inform them that their protected health information has possibly been compromised. Last February 11, 2018, some people broke into the DDS legal and audits offices...
by Ryan Coyne | Apr 23, 2018 | HIPAA News
It has been discovered that UnityPoint Health employee accounts have been compromised and accessed by unauthorized persons. The employee email accounts were initially accessed on November 1, 2017 and went on for a period of three months until February 7, 2018, when...
by Ryan Coyne | Apr 20, 2018 | HIPAA News
It has been discovered that a former employee of Baptist Health’s West Kendall Baptist Hospital in Miami, FL obtained the credit card details of patients and used the data to make fraudulent purchases. The improper use of credit cards was first noticed by Baptist...
by Ryan Coyne | Apr 18, 2018 | HIPAA News
Physiatry Group Integrated Rehab Consultants based in Chicago, IL-based is issuing notification letters to impacted patients alerting them of the exposure of some of their protected health information in line with HIPAA requirements. However, the breach was not first...
by Ryan Coyne | Apr 18, 2018 | HIPAA News
A improperly configured security setting on a radiology interface has lead to the exposure of tens of thousands of patients’ protected health data. A multi-specialty physicians’ organization based in Middleton, NY, Middletown Medical, first noticed the misconfigured...
by Ryan Coyne | Apr 17, 2018 | HIPAA News
Texas Health Resources, a group providing services to over 1.7 million patients in North Texas, is alerting ‘fewer than 4,000 patients’ that a portion of of their sensitive information may have been obtained by an unauthorized person. The data breach may have happened...
by Ryan Coyne | Apr 16, 2018 | HIPAA News
It has been discovered that a number of email accounts of staff members of UnityPoint Health have been accessed by unauthorized individuals. Staff email accounts were first accessed on November 1, 2017 and went on for a duration of three months, ending on February 7,...
by Ryan Coyne | Apr 13, 2018 | Cybersecurity, HIPAA News
The Department of Health and Human Services’ Office of the National Coordinator for Health IT (ONC) has released a new patient guidebook on health record access. The guidebook goes through how patients can access their health data, offers advice for checking health...
by Ryan Coyne | Apr 13, 2018 | GDPR Advice
The term ‘vital interests’ is not new. In fact, it was written into legislation in Schedule 2 paragraph 4 of the 1998 Act. At the time ‘vital interests’ referred to those of subjects whose data was being collected. GDPR has widened the term to...
by Ryan Coyne | Apr 11, 2018 | HIPAA News
Chesapeake Regional Healthcare has found that two hard drives storing the protected health information (PHI) of around 2,100 patients ave gone missing from the Chesapeake Regional Medical Center campus located in Chesapeake, Virginia. The data saved on the devices...
by Ryan Coyne | Apr 10, 2018 | HIPAA News
Oregon has reviewed its data breach notification law to enhance protections for state citizens whose personal information is exposed in a data violation. State governor Kate Brown put her signature to Senate Bill (SB 1551) in March, which brings several regulations up...
by Ryan Coyne | Apr 9, 2018 | GDPR Advice
The use of the words ‘citizen of the European Union’ can be confusing in the context of the General Data Protection Regulation (GDPR). For GDPR compliance requirements, it makes more sense to talk about individuals who are located “in the Union” (within the EU), and...
by Ryan Coyne | Apr 9, 2018 | Cybersecurity, HIPAA News
A recent survey carried out by the Ponemon Institute for ServiceNow has unveiled that healthcare and pharmaceutical companies are not keeping up to date on patching. Weaknesses are not being patched quickly leaving organizations susceptible to attack. The survey was...
by Ryan Coyne | Apr 9, 2018 | Cybersecurity, HIPAA News
Verizon has published its yearly Protected Health Information Breach Report which digs deep into the main factors behind the breaches, why they happen, the motivations of internal and external threat actors, and the main dangers to the confidentiality, integrity, and...
by Ryan Coyne | Apr 6, 2018 | HIPAA News
A network of physicians linked to more over that 50 medical practices in New Jersey, Virtua Medical Group, has been hit with a massive financial penalty by the New Jersey Attorney General’s Office for failing to safeguard the privacy of over 1,650 patients whose...
by Ryan Coyne | Apr 5, 2018 | HIPAA News
A targeted phishing attack carried out on CareFirst Blue Cross Blue Shield has lead to the exposure of 6,800 plan subscriber’ protected health data. The attack was first discovered by CareFirst on March 12, 2018, resulting in a complete review of their systems, which...
by Ryan Coyne | Apr 5, 2018 | HIPAA News
The Special Agents Mutual Benefit Association (SAMBA) health plan is warning almost 14,000 people in relation to a February 2018 protected health information breach. The data breach targeted eligible family members of clients who were covered by the Federal Employees...
by Ryan Coyne | Apr 4, 2018 | HIPAA News
The Arc of Erie County New York (The Arc), a supplierer of person-centered services to people with developmental disabilities, has found that two spreadsheets holding the protected health information of 3,751 patients were accessible on the Internet with no...
by Ryan Coyne | Apr 3, 2018 | HIPAA News
Law enforcement agencies have notified Cambridge Health Alliance (CHA) that the protected health information of some of its subscibers has been obtained by an unauthorized individual. Everett Massachusetts Police Department alerted, on January 31, 2018, CHA that data...
by Ryan Coyne | Mar 30, 2018 | HIPAA News
ATI Physical Therapy has found that protected health information of over 35,000 of its clients may have been accessed when hacker captured details within the email accounts of some of its staff members. A security breach was found on January 18, 2018 when ATI Physical...
by Ryan Coyne | Mar 29, 2018 | HIPAA News
A New York medical practice has revealed that tens of thousands of their patients have had their protected health information exposed online due to an improperly configured server. It is currently not obvious if anyone other than the security researcher who found the...
by Ryan Coyne | Mar 28, 2018 | HIPAA News
It is believed that healthcare data breach that saw the protected health information of clients of CVS Caremark impacted has lead to legal action against CVS, Caremark, and its mailing supplier, Fiserv. The legal action, which was submitted in Ohio federal court on...
by Ryan Coyne | Mar 27, 2018 | HIPAA News
Geneva, NY-based Finger Lakes Health has been hit by a ransomware attack that has impacted its computer system. Employees have been forced to work on pen and paper while the health system tries to remove the malware and restore access to electronic data. The...
by Ryan Coyne | Mar 26, 2018 | HIPAA News
A Clinical Pathology Laboratories Southeast, Inc., (CPLSE) employee’s unencrypted work laptop computer has been stolen, exposing the protected health information of targeted patients and their payment guarantors. Swift action was taken by CPLSE to stop the...
by Ryan Coyne | Mar 23, 2018 | Cybersecurity, HIPAA Advice
Healthcare groups seeking a hosting solution may identify Liquid Web as a possible vendor, but is Liquid Web HIPAA compliant? Can its cloud management services be used by HIPAA-covered bodies for hosting applications and projects that include electronic protected...
by Ryan Coyne | Mar 22, 2018 | HIPAA News
Anomali has teamed up with the National Health Information Sharing and Analysis Center (NH-ISAC) and will be supplying threat intelligence to healthcare groups through NH-ISAC. Anomali will be supplying NH-ISAC with the necessary tools and infrastructure to allow its...
by Ryan Coyne | Mar 21, 2018 | HIPAA News
RoxSan Pharmacy has made contact with 1,049 patients to advise them that some of their protected health information has been shared with to a business associate via unencrypted email. The notification letters were issued to affected people last month, although the...
by Ryan Coyne | Mar 20, 2018 | HIPAA News
Primary Health Care Inc., a non-profit network of community health oganizations based in Des Moines, Marshalltown and Ames, IA, has found that malicious actors have obtained access to the email accounts of four staff members and have possibly viewed or gained...
by Ryan Coyne | Mar 19, 2018 | HIPAA News
The Alabama Data Breach Notification Act (Senate Bill 318) has progressed to be considered by the House of Representatives after being unanimously agreed upon by the Alabama Senate recently. Alabama is one of the final two states that still has to bring in laws which...
by Ryan Coyne | Mar 16, 2018 | HIPAA News
It has been discovered that an electronic device, used to record the signatures of clients, has been disposed of without first clearing the device of all saved protected health information at a ShopRite pharmacy in Millville, New Jersey A small amount of protected...
by Ryan Coyne | Mar 15, 2018 | HIPAA News
Wisconsin-based provider of medical, laboratory, pharmacy, fitness, and physical therapy services QuadMed has discovered that PHI 5,305 clients may have been impermissibly disclosed to certain members of staff. In November 2013, QuadMed took over management of an...
by Ryan Coyne | Mar 14, 2018 | HIPAA News
The PHI of 33,420 people of BJC Healthcare has been accessible by the public online for eight months with no requirement for authentication to see the data. BJC Healthcare is one of the biggest not-for profit healthcare systems in the USA. The St. Louis-based...
by Ryan Coyne | Mar 12, 2018 | HIPAA Advice
To refer to texting as a violation of HIPAA is not strictly correct. Depending on the body copy of the text message, who the text message is being shared with, or mechanisms put in place to safeguard the integrity of Protected Health Information (PHI), texting can be...
by Ryan Coyne | Mar 12, 2018 | HIPAA News
A $575,000 settlement with the New York Attorney General has been agreed by by EmblemHealth following a 2016 mailing error that saw the Health Insurance Claim Numbers of 81,122 clients printed on the outside of envelopes. New York Attorney General Eric T. Schneiderman...
by Ryan Coyne | Mar 9, 2018 | Cybersecurity
The U.S. Office of Personnel Management (OPM) Office of the Inspector General Office of Audits (OIG) has released a Flash Audit Alert claiming Health Net of California has refused to adhere with a recent security audit. Health Net supplies benefits to federal workers,...
by Ryan Coyne | Mar 8, 2018 | HIPAA News
St. Peter’s Surgery & Endoscopy Center in New York has been hit by a malware infection which could have allowed hackers to access medical records of up to 135,000 patients. This is the second biggest healthcare data breach of 2018, so far, and the largest to be...
by Ryan Coyne | Mar 6, 2018 | HIPAA News
The most recent release of the Protenus Healthcare Breach Barometer report has been released. Protenus reports that in total, at least 473,807 patient records were accessed or stolen in January, although the number of people affected by 11 of the 37 breaches is not...
by Ryan Coyne | Mar 6, 2018 | HIPAA News
A ransomware attack on Jemison Internal Medicine of Alabama on December 20, 2017 lead to electronic health records being encrypted, disabling access to the patient data for the healthcare provider. A ransom demand was sent for the keys to disable the encryption...
by Ryan Coyne | Mar 5, 2018 | HIPAA News
A recent report published in the Post and Courier revealed that the Medical University of South Carolina (MUSC) fired 13 employees last year for violating HIPAA Rules by prying on patient records. Overall, there were 58 privacy breaches in 2017 at MUSC, all of which...
by Ryan Coyne | Mar 5, 2018 | HIPAA Advice
HIPAA Compliance Checklist 2018-2019 If your group manages electronic Protected Health Information (ePHI), the best thing for you to do is to carefully consider all of the information included here in our HIPAA compliance checklist 2018-2019. The purpose of our HIPAA...
by Ryan Coyne | Mar 2, 2018 | HIPAA News
White and Bright Family Dental has found that one of its data servers storing patients’ private data has been hacked. Access to the Fresno, CA-based server was obtained by the hackers on January 30, 2018. The Fresno Police Department was quickly made aware of the...
by Ryan Coyne | Mar 1, 2018 | HIPAA News
Around 1,900 people who were treated by the University of Virginia Health System are being contacted to be made aware that a hacker has gained access to their medical information using a malware infection. The malware in question had been loaded onto the devices in...
by Ryan Coyne | Feb 26, 2018 | HIPAA Advice
Slack is a useful tool that can make it much easier to communicate and collaborate, but is Slack HIPAA compliant? Would it be against HIPAA regulations for healthcare entities to send protected health information (PHI) via Slack? Is Slack HIPAA Compliant? The question...
by Ryan Coyne | Feb 25, 2018 | HIPAA News
Sutter Health is alerting a number of clients that some of their protected health information may have been accessed in a phishing attack on one of its business associates – the Salem and Green legal firm. On approximately October 11, 2017, a phishing email was opened...
by Ryan Coyne | Feb 24, 2018 | Cybersecurity, HIPAA News
Over 750,000 businesses are now using Zoom for online video and web conferencing. However, before implementing use of the service it is vital to consider if it adheres to HIPAA Rules for appropriate use by healthcare groups in relation to sharing PHI. A cloud-based...
by Ryan Coyne | Feb 23, 2018 | Cybersecurity, HIPAA Advice
As a document management and storage service for businesses, eFileCabinet provide on-site and cloud storage. However, is the service appropriate for the healthcare sector? Does eFileCabinet adhere with HIPAA rules or will using it lead to HIPAA breaches? Document...
by Ryan Coyne | Feb 23, 2018 | Cybersecurity, HIPAA News
The American Journal of Managed Care has released a report detailing hospital data breaches experienced in the United States. The focus of the study was to discover common characteristics of hospital data breaches, what the biggest issue areas are, the main causes of...
by Ryan Coyne | Feb 22, 2018 | Cybersecurity, HIPAA News
A recent MediaPro report released there is still an absence of readiness to deal with common cyberattacks and privacy and security dangers are still not fully comprehended by healthcare staff. In MediaPro’s 2017 State of Privacy and Security Awareness Report, the firm...
by Ryan Coyne | Feb 22, 2018 | HIPAA News
Aetna has begun a legal action to claim compensation from an administrative support firm in relation to a July 2017 data violation in which details of HIV medications visible through transparent plastic windows of envelopes in a mail shot. Letters inserted in some of...
by Ryan Coyne | Feb 22, 2018 | HIPAA Advice
A web-based document management and storage system, SharePoint is one of the most popular leading collaborative services available, used by 78% of Fortune 500 firms. The service relies on Microsoft’s OpenXML document standard and therefore integrates seamlessly with...
by Ryan Coyne | Feb 21, 2018 | Cybersecurity, HIPAA Advice
Yammer is a freemium enterprise social networking platform used for private communication and collaboration within organizations since 2008. After a bedding in period Microsoft purchased the company in 2012. It has grown in popularity since then to the extent that it...
by Ryan Coyne | Feb 20, 2018 | HIPAA Advice
A web and video conferencing and collaboration platform, WebEx allows businesses connect with remote workers and partners as if they are working on site. Using utilities like WebEx, healthcare groups can interact quickly and easily with the workforce, no matter where...
by Ryan Coyne | Feb 19, 2018 | HIPAA News
A privacy breach has been experienced by the Puerto Rico Health Plan Triple-S Advantage. The breach, which affected 36,000 plan members, was due to a mailing mistake which saw sensitive information of plan subscribers disclosed to incorrect people. The released...
by Ryan Coyne | Feb 16, 2018 | HIPAA News
The protected health information (PHI) of 925 patients of Coastal Cape Fear Eye Associates has been compromised in a ransomware attack. North Carolina’s Coastal Cape Fear Eye Associates, P.A., found that its systems had been breached on December 5 2017. Upon noticing...
by Ryan Coyne | Feb 15, 2018 | HIPAA News
Even when HIPAA-compliant businesses close down the obligation to abide by HIPAA Rules does not cease to exist. This was highlighted recently when FileFax, a Northbrook, IL-based firm that offers medical record storage, maintenance, and delivery services for HIPAA...
by Ryan Coyne | Feb 14, 2018 | HIPAA News
Ron’s Pharmacy Services , based in San Diego, has reported that an email account that held limited protected health information has been accessed by an unknown person. Suspicious activity was noticed on a staff member’s email account on October 3, 2017 leading to an...
by Ryan Coyne | Feb 13, 2018 | Cybersecurity, HIPAA News
A hacker has potentially gained access to the medical records of up to 24,000 patients of Decatur County General Hospital in Tennessee. Teh Helath centre has discovered malware has been placed on a server storing its internal electronic medical record system. A...
by Ryan Coyne | Feb 12, 2018 | HIPAA News
The protected health information of approximately 2,600 patients of Partners HealthCare System has been sent notifications that their PHI may have been compromised is a HIPAA breach. Even though health care organizations covered by HIPAA are given 60 days following...
by Ryan Coyne | Feb 9, 2018 | Cybersecurity, HIPAA News
Western Washington Medical experienced a PHI breach when the protected health information of 842 patients of Group was exposed in November 2017 after files including sensitive health information were disposed, in error, with normal rubbish. On November 13, 2017, the...
by Ryan Coyne | Feb 8, 2018 | HIPAA News
Partners HealthCare System is making contact with around 2,600 patients to advise them that, potentially, some of their protected health information (PHI) may have been accessed. Even though HIPAA covered bodies have up to 60 days after the identification of a breach...
by Ryan Coyne | Feb 7, 2018 | HIPAA News
Florida-based CarePlus Health Plans has experienced a PHI breach incident which has seen certain plan members’ protected health information disclosed, in error, to other plan subscribers. A mailing including ‘Explanation of benefits statements (EOB)’ was...
by Ryan Coyne | Feb 6, 2018 | HIPAA News
Pharmacy benefit manager CVS Pharmacy is suing mail service provider Press America, Inc in relation to over an accidental disclosure of 41 peoples’ protected health information. CVS Pharmacy is under contract to provide a mail-order based pharmacy service for a...
by Ryan Coyne | Feb 5, 2018 | HIPAA News
Massachusetts Attorney General Maura Healey has revealed the introduction launch of a new Internet-based data breach reporting application. The focus is to allow for breached organizations to file breach notifications to the Attorney General’s office as simply as...
by Ryan Coyne | Feb 4, 2018 | HIPAA News
A business associate of Forrest Health’s Forrest General Hospital, HORNE LLP is alerting a number of hospital patients that some of their PHI (PHI) has potentially been stolen by a third party after they accessed the email account of one of its staff members. HORNE,...
by Ryan Coyne | Feb 3, 2018 | HIPAA News
660 patients of Eastern Maine Medical Center are being notified that some of their protected health information may have been been exposed after a ortable hard drive, that stored sensitive information, has gone missing from its State Street facility, in Bangor, ME....
by Ryan Coyne | Feb 2, 2018 | HIPAA News
A reminder was recently issued by the Centers for Medicare & Medicaid Services (CMS) that eligible hospitals and Critical Access Hospitals (CAHs) using the Electronic Health Record Incentive Schemes must employ the QualityNet Secure Portal (QNet) to submit...
by Ryan Coyne | Jan 31, 2018 | HIPAA News
A ransomware attack, discovered last week, against the EHR vendor Allscripts lead to thousands of healthcare suppliers being prevented from accessing patient data or using the e-prescription service. Florida-based Surfside Non-Surgical Orthopedics have moved quickly...
by Ryan Coyne | Jan 29, 2018 | HIPAA News
Westminster Ingleside King Farm Presbyterian Retirement Communities has experienced a malware infection that may have resulted in the attackers obtainingt he protected health information of may of it patients. The assisted living facility, based in Washington D.C.,...
by Ryan Coyne | Jan 26, 2018 | HIPAA News
The South Dakota Senate Attorney Judiciary Committee has passed a bill to introduce data breach notification legislation after a 7-0 vote. The bill was proposed by the Committee on Judiciary following a request issued by the Attorney General Marty Jackley. At present...
by Ryan Coyne | Jan 24, 2018 | HIPAA News
The protected health information of 53,173 patients who received services from Onco360 and CareMed Specialty Pharmacy has been compromised in an email hacking attack. The patients were notified after a security breach when suspicious activity involving an employee’s...
by Ryan Coyne | Jan 24, 2018 | Cybersecurity, HIPAA News
A new report released by online security company Sophos indicates that victims of ransomware attacks have a greater chance of suffering additional attacks within the subsequent 12 months. The report states that the healthcare sector is at the highest risk of...
by Ryan Coyne | Jan 22, 2018 | HIPAA News
Over 1,300 clients of Palomar Medical Center Escondido have been wanred that a nurse, previously employed by the group, accessed their medical records without permission while they were being treated at the health center. The privacy breaches happened over a 15-month...
by Ryan Coyne | Jan 20, 2018 | HIPAA News
Health insurer Aetna has agreed to a settlement in a class action lawsuit taken by victims of a mailing mistaken that lead to the details of HIV medications prescribed to individuals being seen through the clear plastic windows of the envelopes they were sent in. The...
by Ryan Coyne | Jan 18, 2018 | Cybersecurity
Hancock Health , based in Greenfield, Indiana experienced a ransomware attack on Thursday last week. Employees of Hancock were forced to use offline methods to record patient health information, while IT staff tried to respond to the attack and save the encrypted...
by Ryan Coyne | Jan 17, 2018 | HIPAA News
A recent University of Phoenix College of Health Professions survey shows that indicates registered nurses (RNs) are satisfied withtheir organization’s measures in place to stop data breaches occurring. The survey was conducted on 504 full time RNs and administrative...
by Ryan Coyne | Jan 16, 2018 | Cybersecurity, HIPAA News
43,000 patients of West Virginia-based Coplin Health Systems have been advised that their PHI has possibly been exposed due to the theft of an unencrypted laptop computer from the vehicle of a member of staff. Coplin Health was made aware to the theft of the laptop on...
by Ryan Coyne | Jan 13, 2018 | HIPAA News
Charles River Medical Associates, based in Framingham, MA-based, has discovered that one of its portable hard drives was missing, possibly affecting the PHI of almost 9,400 people Last November, the practice discovered that the device which contained x-ray images,...
by Ryan Coyne | Jan 12, 2018 | HIPAA News
It has been discovered that an unauthorized person has gained access to parts of its Oklahoma State University Center for Health Sciences (OSUCHS) computer network and potentially downloaded files holding billing information of Medicaid subscribers. The security...
by Ryan Coyne | Jan 11, 2018 | HIPAA News
The Agency for Health Care Administration in Florida has found that an unauthorized individual obtained access to a single email account due to a member of staff beign tricked by phishing scam. The member of staff received and responded to the malicious phishing email...
by Ryan Coyne | Jan 10, 2018 | HIPAA News
1,128 patients’ protected health information has potentially been viewed after an unauthorized individual gained access to the Compassionate Care Hospice Las Vegas (CCHLV) network and server. The breach occurred on October 28, 2017, CCHLV was alerted that its network...
by Ryan Coyne | Jan 9, 2018 | Cybersecurity, HIPAA News
The findings of an audit of the North Carolina State Medicaid agency by The Department of Health and Human Services’ Office of Inspector General (OIG) have been published in a new report. The report indicates that the State agency has failed to put in place sufficient...
by Ryan Coyne | Jan 8, 2018 | HIPAA News
Kaiser Permanente has suffered a couple of security incidents which filed with the Department of Health and Human Services’ Office for Civil Rights (OCR). Overall, in excess of 5,000 people have been affected by the data violations. The HIPAA breaches impact clients...
by Ryan Coyne | Jan 6, 2018 | HIPAA News
It has been discovered that a former member of staff at SSM Health has been accessing the health records of patients without any valid work reason for doing so for roughly eight months. The former health worker was employed in the St. Louis, MO-based not-for-profit...
by Ryan Coyne | Jan 5, 2018 | HIPAA News
A former employee of Emory Healthcare (EHC) has been found to have obtained the protected health information of 24,000 EHC patients and shared the data to a Microsoft Office 365 OneDrive account, from where it could possibly be downloaded by other people. The former...
by Ryan Coyne | Jan 4, 2018 | HIPAA News
Longs Peak Family Practice (LPFP) in Colorado has found that an individual gained access to its systems and encrypted files using ransomware last November. The family and sports medicine practice based in Longmont CO, found suspicious activity on its network on...
by Ryan Coyne | Jan 3, 2018 | HIPAA News
A cyberattack, causing unexpected downtime, has been discovered at The University of Rochester Medicine’s Jones Memorial Hospital in Wellsville, NY. The attack is thought to have started on Wednesday December 27 and has lead to disruption to some of its information...
by Ryan Coyne | Dec 30, 2017 | HIPAA News
The Colorado Mental Health Institute at Pueblo has found that one of its staff members has been tricked by a phishing scam that possibly allowed the attacker to gain access to the protected health information of around 650 patients. A 449-bed hospital providing...
by Ryan Coyne | Dec 29, 2017 | GDPR Advice
It is a common misconception that the General Data Protection Regulation (GDPR), which comes into force on May 25th 2018, only applies to businesses and organizations which are based within the EU and that international organizations will be exempt. This is not the...
by Ryan Coyne | Dec 29, 2017 | HIPAA News
A Reno-based dental practice in has been hit by a ransomware attack that denied access to dental records and images for five days. The malicious software was installed, during a ransomware attack on October 30, on one computer and one server at the Wager Evans Dental...
by Ryan Coyne | Dec 27, 2017 | Cybersecurity
Almost 10,000 patients of Columbus Surgery Center, LLC and Eye Physicians, P.C., in Columbus, Nebraska have been impacted by a ransomware attack. The ransomware attack was carried out on October 7, 2017 and hit a large amount of files on some servers being encrypted...
by Ryan Coyne | Dec 22, 2017 | GDPR Advice
The introduction of the General Data Processing Regulation (GDPR), on 25 May, 2018, will regulate the way different member states of the EU deal with the protection of personal data of individuals in the EU. The GDPR will lead to a new level of uniformity in regard to...
by Ryan Coyne | Dec 21, 2017 | GDPR Advice
If you think that your company will not be subject to the General Data Protection Regulation (GDPR) because it is not based in a country within the European Union (EU), you may be in for a rude awakening. Compliance with the GDPR is not solely related to where a...
by Ryan Coyne | Dec 21, 2017 | HIPAA News
The protected health information of 1,750 patients of Austin Manual Therapy (AMT) may have been accessed and stolen by a criminal who gained access to the group’s system. A forensic review by a leading national cybersecurity team showed access was initially...
by Ryan Coyne | Dec 20, 2017 | HIPAA News
Patients of MidMichigan Medical Center (MMC) in Alpena have been warned of a potential breach of their health data. On November 18, a MMC cardiologist took patient files from the Alpena cardiology office without permission. The files were taken to the cardiologist’s...
by Ryan Coyne | Dec 19, 2017 | HIPAA News
NYU Langone Health System has found that files that included a log of presurgical insurance authorizations, relating to around 2,000 patients, was mistakenly recycled by a cleaning company in October 2017. Data in the binder included names, birth dates, dates of...