Popular, Phishing Scams, Health Care Providers

Cybersecurity challenges in the health care industry: Legal, regulatory, and risk considerations

Constangy, Brooks, Smith & Prophete, LLP on 7/28/2025

Health care remains one of the most targeted and vulnerable sectors when it comes to cyberattacks. In fact, a recent breach at a major health care analytics firm exposed the data of 5.4 million U.S. patients, making it one of...more

HHS and FBI Release Joint Cybersecurity Advisory Statement for Healthcare Providers

Morgan Lewis - Health Law Scan on 7/18/2024

Shortly after our prior blog post discussing the need for healthcare entities to shore up protections against phishing attacks, the Department of Health and Human Services (HHS) and the Federal Bureau of Investigation (FBI)...more

OCR Increases Focus on Phishing Attacks Against Healthcare Providers

Morgan Lewis - Health Law Scan on 6/21/2024

Phishing, the act of impersonating a person or business to deceive a target into revealing sensitive information, has quickly become the tool of choice for scammers and cybercriminals. In 2023, the Federal Bureau of...more

Data Breaches up 72% From Record High: Cyber Incident Readiness Must be Top of Mind

Epiq on 3/13/2024

“Protect your data! Breaches are on the rise!” These warnings seem to be everywhere – and rightfully so. Threat actors are sophisticated and new breach trends are constantly materializing. Awareness is no longer enough. It...more

HIPAA on the Horizon in the New Year: Important Lessons from an Active 2023 and Regulatory Initiatives to Watch for in 2024

Dorsey & Whitney LLP on 1/4/2024

2023 marked 20 years since the first compliance deadline under the Health Insurance Portability and Accountability Act’s (“HIPAA”) privacy rule. Despite the two decades of experience with HIPAA, compliance continues to remain...more

OCR Will Focus on You if You Don’t Focus on Cybersecurity

Akerman LLP - Health Law Rx on 12/21/2023

With a couple of “firsts,” the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) is signaling that it is cracking down on healthcare organizations that fail to identify and address cybersecurity...more

OCR Issues Guidance to Patients and Providers on Telehealth Privacy and Security

Ankura on 11/30/2023

On October 18, 2023, the Department of Health and Human Services (DHHS) through the Office for Civil Rights (OCR) issued an update1 containing two resource documents to help educate patients regarding privacy and security...more

[Webinar] HIPAA Compliance: The Importance of an Effective Privacy and Security Aware - August 17th, 12:00 pm - 1:30 pm CT

Society of Corporate Compliance and Ethics... on 8/11/2023

Learning Objectives - The fundamental foundation of establishing a solid HIPAA compliance, privacy and cyber security awareness program - The importance of end user HIPAA compliance, privacy and cyber security training for...more

Health Care Organizations Warned of Aggressive Ransomware Threat

Mintz - Privacy & Cybersecurity Viewpoints on 4/29/2022

Ransomware is the “business pandemic.” Warnings have been issued by multiple agencies around the world to alert businesses to increase their protection and awareness. Most recently, the Department of Health and Human...more

Report on Patient Privacy Volume 22, Number 3. Privacy Briefs: March 2022

Health Care Compliance Association (HCCA) on 3/14/2022

Report on Patient Privacy 22, no. 3 (March, 2022) - HHS said in early March that it was not aware of any specific threat to U.S. health care organizations stemming from the Russian invasion of Ukraine. “However, in the...more

Report on Patient Privacy Volume 22, Number 1. Privacy Briefs: January 2022

Health Care Compliance Association (HCCA) on 1/18/2022

Report on Patient Privacy 22, no. 1 (January, 2022) - New Jersey issued its third settlement in three months on state-level health care privacy and security laws, announcing that three cancer care providers would adopt new...more

Report on Patient Privacy Volume 21, Number 9. Privacy Briefs: September 2021

Health Care Compliance Association (HCCA) on 9/15/2021

Report on Patient Privacy 21 no. 9 (September, 2021) - DuPage Medical Group in Chicago said that the personal information of more than 600,000 patients may have been compromised in a July cyberattack. The medical group,...more

Report on Patient Privacy Volume 21, Number 4. Privacy Briefs: April 2021

Health Care Compliance Association (HCCA) on 4/13/2021

Report on Patient Privacy 21, no. 4 (April 2021) - A Texas Medicaid subcontractor has been terminated after a data breach caused by a ransomware attack originating from Russia exposed the personal information of tens of...more

Cybercriminals Target Healthcare Industry During The Pandemic

Fisher Phillips on 11/17/2020

Several federal agencies have teamed up to warn healthcare employers of the increased threat they face as a result of malicious cybercriminals aiming to take advantage of the pandemic to wreak havoc on their operations. The...more

Health Care Facilities Are Under Cyberattack; Cyber Insurance Provides A Valuable Defense

Lowenstein Sandler LLP on 11/5/2020

U.S. hospitals, already on the front lines of fighting the coronavirus pandemic, are now facing viral attacks by cybercriminals. More than 20 U.S. hospitals and health care organizations have reported their data being held...more

4 Ways to Protect ePHI Beyond HIPAA Compliance

NAVEX on 8/14/2020

Given the choice between credit card data and digital health records, cybercriminals prefer the latter. A stolen credit card can be canceled. Electronic protected health information (ePHI) with its treasure-trove of...more

Report on Patient Privacy Volume 20, Number 6. Privacy Briefs: June 2020

Health Care Compliance Association (HCCA) on 6/16/2020

Report on Patient Privacy 20, no. 6 (June 2020): A divided Indiana Court of Appeals has reinstated a patient’s claim that a hospital is vicariously liable for the actions of a medical assistant who accessed the patient’s...more

Six Steps to Protect Against Increased Telehealth Cybersecurity Dangers

Carlton Fields on 4/23/2020

Last week, the American Medical Association (AMA) and the American Hospital Association (AHA), recognizing the increased cybersecurity threats facing health care providers, issued joint guidance for physicians working from...more

Data Privacy + Cybersecurity Insider - July 2019 #4

Robinson & Cole LLP on 7/29/2019

Security research firm Gigamon has reported that the nasty cybercriminal group FIN8 may have reappeared in June after a two-year silence. FIN8 is known for implementing malware on point of sale systems to steal credit card...more

HHS Issues Practical New Cybersecurity Guidance for Healthcare Businesses of all Sizes

Stoel Rives - Health Law Insider® on 3/7/2019

In late January, the U.S. Department of Health and Human Services’ Healthcare & Public Health Sector Coordinating Council issued a new cybersecurity guidance document for healthcare businesses of all sizes. The guidance...more

HHS Releases Guidance For Health Industry On Voluntary Cybersecurity Practices

Roetzel & Andress on 2/22/2019

The Department of Health and Human Services (HHS) has released a publication entitled the "Health Industry Cybersecurity Practices (HICP): Managing Threats and Protecting Patients." The HICP was prepared in response to the...more

HHS Issues Voluntary Cybersecurity Guidance for the Healthcare Industry

McGuireWoods LLP on 2/22/2019

The Department of Health and Human Services (HHS) recently released a report titled “Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients.” ...more

U.S. Department of Health and Human Services Issues Cybersecurity Guidance For Health Care Providers

Bond Schoeneck & King PLLC on 2/4/2019

The U.S. Department of Health and Human Services (“HHS”), in conjunction with the Health Sector Coordinating Council has released cybersecurity guidelines (the “Guidelines”) to assist health care providers and inform best...more

HHS Releases New Cybersecurity Guidance

Patterson Belknap Webb & Tyler LLP on 1/22/2019

In a four-part publication, a Task Force that included the Department of Health and Human Services (HHS) and private sector industry leaders released guidance for the healthcare industry on cybersecurity best practices. The...more

Impact of the New Health Industry Cybersecurity Practices: 2019 Outlook

Holland & Knight LLP on 1/14/2019

• The U.S. Department of Health and Human Services on Dec. 28, 2018, announced the release of the "Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients" that provides a "Call to Action" to make...more

Today's Popular Updates › Phishing Scams › Health Care Providers

"My best business intelligence, in one easy email…"