Over 1,300 clients of Palomar Medical Center Escondido have been wanred that a nurse, previously employed by the group, accessed their medical records without permission while they were being treated at the health center. The privacy breaches happened over a 15-month...
Class Action Lawsuit by Victims of Aetna HIV Violation Settled
Health insurer Aetna has agreed to a settlement in a class action lawsuit taken by victims of a mailing mistaken that lead to the details of HIV medications prescribed to individuals being seen through the clear plastic windows of the envelopes they were sent in. The...
University of Phoenix Survey Shows Just 20% of RNs Encountered PHI Breaches
A recent University of Phoenix College of Health Professions survey shows that indicates registered nurses (RNs) are satisfied withtheir organization’s measures in place to stop data breaches occurring. The survey was conducted on 504 full time RNs and administrative...
Laptop Theft Impacts 43,000 Patients of Coplin Health Systems
43,000 patients of West Virginia-based Coplin Health Systems have been advised that their PHI has possibly been exposed due to the theft of an unencrypted laptop computer from the vehicle of a member of staff. Coplin Health was made aware to the theft of the laptop on...
9387 Patients’ PHI Exposed Due to Lack of Encryption on Hard Drive
Charles River Medical Associates, based in Framingham, MA-based, has discovered that one of its portable hard drives was missing, possibly affecting the PHI of almost 9,400 people Last November, the practice discovered that the device which contained x-ray images,...
Patients of Oklahoma State University Center for Health Sciences Informed of PHI Breach
It has been discovered that an unauthorized person has gained access to parts of its Oklahoma State University Center for Health Sciences (OSUCHS) computer network and potentially downloaded files holding billing information of Medicaid subscribers. The security...
30,000 Medicaid Recipients Affected by Phishing Attack on Florida Agency for Health Care Administration
The Agency for Health Care Administration in Florida has found that an unauthorized individual obtained access to a single email account due to a member of staff beign tricked by phishing scam. The member of staff received and responded to the malicious phishing email...
1,128 Patients Impacted by Compassion Care Hospice Breach
1,128 patients’ protected health information has potentially been viewed after an unauthorized individual gained access to the Compassionate Care Hospice Las Vegas (CCHLV) network and server. The breach occurred on October 28, 2017, CCHLV was alerted that its network...
Data Security Inadequacies at North Carolina State Medicaid Agency by OIG
The findings of an audit of the North Carolina State Medicaid agency by The Department of Health and Human Services’ Office of Inspector General (OIG) have been published in a new report. The report indicates that the State agency has failed to put in place sufficient...
Two Dara Security Incidents Reported at Kaiser Permanente Reports
Kaiser Permanente has suffered a couple of security incidents which filed with the Department of Health and Human Services’ Office for Civil Rights (OCR). Overall, in excess of 5,000 people have been affected by the data violations. The HIPAA breaches impact clients...
SSM Health Patients Notified of Data Breach Involving Member of Staff
It has been discovered that a former member of staff at SSM Health has been accessing the health records of patients without any valid work reason for doing so for roughly eight months. The former health worker was employed in the St. Louis, MO-based not-for-profit...
Emory Healthcare Data Breach Impacts 24,000 Patients
A former employee of Emory Healthcare (EHC) has been found to have obtained the protected health information of 24,000 EHC patients and shared the data to a Microsoft Office 365 OneDrive account, from where it could possibly be downloaded by other people. The former...
Longs Peak Family Practice Suffers Two Cyberattacks in One Week
Longs Peak Family Practice (LPFP) in Colorado has found that an individual gained access to its systems and encrypted files using ransomware last November. The family and sports medicine practice based in Longmont CO, found suspicious activity on its network on...
Ongoing Cyberattack Uncovered at Jones Memorial Hospital
A cyberattack, causing unexpected downtime, has been discovered at The University of Rochester Medicine’s Jones Memorial Hospital in Wellsville, NY. The attack is thought to have started on Wednesday December 27 and has lead to disruption to some of its information...
Colorado Mental Health Institute Hit by Phishing Attack
The Colorado Mental Health Institute at Pueblo has found that one of its staff members has been tricked by a phishing scam that possibly allowed the attacker to gain access to the protected health information of around 650 patients. A 449-bed hospital providing...
Reno Dental Practice Hit by Ransomware Attack
A Reno-based dental practice in has been hit by a ransomware attack that denied access to dental records and images for five days. The malicious software was installed, during a ransomware attack on October 30, on one computer and one server at the Wager Evans Dental...
Austin Manual Therapy Reports Potential Data Theft Incident
The protected health information of 1,750 patients of Austin Manual Therapy (AMT) may have been accessed and stolen by a criminal who gained access to the group's system. A forensic review by a leading national cybersecurity team showed access was initially gained on...
MidMichigan Medical Center Documents Found in the Street
Patients of MidMichigan Medical Center (MMC) in Alpena have been warned of a potential breach of their health data. On November 18, a MMC cardiologist took patient files from the Alpena cardiology office without permission. The files were taken to the cardiologist’s...
PHI of 6,600 Patients in New York and New Jersey Exposed
NYU Langone Health System has found that files that included a log of presurgical insurance authorizations, relating to around 2,000 patients, was mistakenly recycled by a cleaning company in October 2017. Data in the binder included names, birth dates, dates of...
Over 5,000 Patients’ PHI Exposed in Texas and Pennsylvania Data Breaches
Two serious breaches of patients’ protected health information have been discoveredd in Texas and Pennsylvania. Email Account Compromised at Midland Memorial Hospital Midland Memorial Hospital has suffered a breach of a a number of patients’ protected health...
Paper Records Missing from Storage Facility According to Illinois Physicians Network
Many data breaches have been reported by HIPAA-covered entities, involving the loss or theft of physical records, in the past two months. In November, seven violations involving paper records were made known to the HHS’ Office for Civil Rights, and another five...
47,000 Patients of Oklahoma Health Department Re-Notified of 2016 Data Breach
The Oklahoma Department of Human Services experienced, in April 2016, a data breach, and while alerts were sent to affected people and the DHS’ Office of Inspector General shortly after the breach was found, a breach notice was not filed to the HHS’ Office for Civil...
24,000 Patients Affected by UNC Health Care Breach
UNC Dermatology & Skin Cancer Center has discovered that one of its laptop computers has been stolen, exposing the protected health information of around 24,000 patients. The computer was obtained by unauthorized individuals in a break in on October 8, 2017 at the...
Phishing Attack Impacts 11,350 Sinai Health System Patients
Two employees at Chicago’s Sinai Health System have had their email accounts compromised in a recent cyberattack. Sinai Health System reports that the phishing attack happened on October 2, and that it was quickly discovered and mitigated. Access to the compromised...
New Jersey Sleep Medicine Specialists Experience Ransomware Attack
The New Jersey-based Hackensack Sleep and Pulmonary Center, experts in sleep disorders and pulmonary conditions and diseases, has suffered a ransomware attack that in the protected health information of certain clients being encrypted. The ransomware attack happened...
Baptist Health Louisville Phishing Attack Sees 880 Patients Potentially Exposed
Louisville, KY based Baptist Health has contacted 880 patients that some of their protected health information may have been obtained by by hackers. The PHI violation was found on October 3, 2017, when irregular activity was discovered on the email account of an...
Email Cyber Attack Leads to 18,500 Patients’ PHI Exposed
The Henry Ford Health System has started alerting almost 18,500 patients that some of their protected health information may have been been accessed by an unauthorized person. The breach was found on October 3, 2017 when unauthorized access to the email accounts of...
Lowell Hospital Employee Fired for Accessing PHI Following Theft
The discovery has been made that the medical records of 769 patients of Lowell General Hospital in Massachusetts have been accessed by an employee without any valid work reason. In accessing the medical details, the employee violated hospital policies and breached the...
CHCS Employee Believed to Have Stolen PHI of 28,000 Subscribers
A provider of mental health treatment and support services for individuals with intellectual and developmental disabilities, Center for Health Care Services (CHCS), has foudn that documents containing the protected health information of patients have been illegally...
Pennsylvania Obs/Gyn Clinic Medical Records Found at Recycling Center
Paper files with information including names, Social Security details, and medical records, along with details of cancer diagnoses and sexually transmitted diseases (STDs), have been found at a recycling center in Allentown, Pennsylvania. The files seem to have...
Raise the level of HIPAA Awareness in your organization with Learner-Friendly, Comprehensive and Affordable HIPAA Training.
COMPREHENSIVE HIPAA TRAINING
Used in 1000+ Healthcare Organizations and 100+ Universities
Privacy is key to everything that we do at J Flowers Health Institute. We require the highest data privacy standards in our daily operations between our team members and patients. The HIPAA compliance and cyber security training we provide to our teams with ComplianceJunction creates enormous value for our organization.
Kevin DeLoach
Chief Operating Officer
J. Flowers Health Institute






























