News & Analysis as of May 30, 2025

Health Insurance Portability and Accountability Act (HIPAA)

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

OCR Proposed Tighter Security Rules for HIPAA Regulated Entities, including Business Associates and Group Health Plans

Jackson Lewis P.C. on 1/2/2025

As the healthcare sector continues to be a top target for cyber criminals, the Office for Civil Rights (OCR) issued proposed updates to the HIPAA Security Rule (scheduled to be published in the Federal Register January 6). It...more

Telehealth Providers: HHS Issues HIPAA Best Practices

Foley & Lardner LLP on 11/20/2023

Recognizing the evolving landscape of care delivery and growth of telehealth, the U.S. Department of Health and Human Services (HHS) published a resource guide aimed at assisting telehealth providers in explaining the privacy...more

Privacy Briefs: October 2023

Health Care Compliance Association (HCCA) on 10/6/2023

Report on Patient Privacy 23, no. 10 (October, 2023) Kaiser Foundation Health Plan Inc. and Kaiser Foundation Hospitals will pay California $49 million to resolve allegations that they unlawfully disposed of hazardous waste,...more

OCR Updates Ransomware Guidance

King & Spalding on 6/15/2021

On June 9, 2021, OCR distributed an update to those on its Privacy List sharing links to alerts and resources for addressing the growing number and size of ransomware incidents. One such resource included a White House memo...more

A Guide to Practical, Regulatory, and Reputational Risk Management

Epstein Becker & Green on 6/3/2021

Ransomware Particularly Inflicts Health Care and Life Sciences Organizations - Ransomware is a malicious cyber threat vector that employs encryption malware to prevent users from accessing their systems and data unless...more

Healthcare Systems Remain an Attractive Target for Ransomware Attacks

Davis Wright Tremaine LLP on 11/18/2020

Users of Universal Health Services (UHS), one of the largest healthcare systems in the country, recently lost access to electronic medical records when UHS suffered a ransomware attack and took its systems offline to...more

Contradictory Responses by Privacy Regulators Post-COVID-19: Balancing the Economy With Cybersecurity in a Changed World (Privacy)

Lowenstein Sandler LLP on 6/1/2020

The COVID-19 pandemic has had a disparate effect on privacy regulators, with varying levels of enforcement advocated by different government entities; the California Attorney General, the U.S. Department of Health & Human...more

Data Privacy + Cybersecurity Insider - February 2020

Robinson & Cole LLP on 2/7/2020

Researchers at Sentinel One and Dragos have detected malicious code, called EKANS or Snake, that has been designed specifically to target industrial control systems (ICS), including those of oil refineries, manufacturing...more

Data Privacy + Cybersecurity Insider - December 2019 #3

Robinson & Cole LLP on 12/23/2019

It is being reported that LifeLabs, a Canadian lab company that is the largest provider of laboratory diagnostics and lab testing services in Canada, recently paid an undisclosed ransom to hackers who compromised its computer...more

Trickbot and Emotet Financial Malware Now Attacking the Healthcare Industry

Stoel Rives - Global Privacy & Security Blog® on 11/26/2019

In a recent Cybercrime Tactics and Techniques Report focusing on the health care industry, cybersecurity company Malwarebytes discovered a significant 82% spike in Trojan malware attacks on health care organizations in Q3...more

HIPAA Breach Results in a $4,500,000 Class Action Settlement

Sheppard Mullin Richter & Hampton LLP on 2/21/2019

Community Health System, one of the largest health systems in the United States, has agreed to pay $4,500,000 to settle claims made against it arising from a 2014 data breach. The data breach, believed to be caused by malware...more

First Joint Cross-State HIPAA Breach Lawsuit Brought in Response to 2015 Cyberattack

White and Williams LLP on 12/14/2018

A lawsuit has been filed by the attorneys general of 12 states against a company called Medical Informatics Engineering (MIE) arising out of a 2015 data breach involving stolen medical records for millions of individuals. The...more

Data Privacy + Cybersecurity Insider - September 2018 #3

Robinson & Cole LLP on 9/24/2018

Schneider Electric recently issued a consumer warning that it mistakenly shipped to its customers USB drives that were infected with malware. Schneider Electric stated in its alert that “Schneider Electric has determined that...more

Data Privacy + Cybersecurity Insider - February 2018 #4

Robinson & Cole LLP on 2/26/2018

U.S. Estimates that Cyber Hacks Cost Up to $109 Billion in 20 - The Council for Economic Advisors (CEA) issued a report this month, entitled “The Cost of Malicious Cyber Activity to the U.S. Economy,” which concludes that...more

OCR Warns of Cyber Extortion and Provides Checklist

Robinson+Cole Data Privacy + Security Insider on 2/19/2018

In its January newsletter, the Office for Civil Rights (OCR) focused on cyber extortion, which it stated has “risen steadily over the past couple of years and continue to be a major source of disruption for many...more

Data Privacy + Cybersecurity Insider - November 2017

Robinson & Cole LLP on 11/3/2017

US-CERT Warns of New Ransomware: Bad Rabbit - The U.S. Computer Emergency Readiness Team (US-CERT) is warning companies in the U.S. about a new ransomware dubbed “Bad Rabbit.” US-CERT stated it has received multiple...more

ALERT: Prepare to be Ransomed: A Primer on Legal Obligations Before and After Ransomware Strikes

Pullman & Comley, LLC on 10/30/2017

According to a recent U.S. Government Interagency report, ransomware is the fastest growing malware threat, targeting users of all types. An incredible 51 percent of respondents in a January 2017 study by the Ponemon...more

Healthcare Cyber: House Inquiry Targets Medical Software

Patterson Belknap Webb & Tyler LLP on 10/23/2017

In its latest inquiry into cybersecurity risks in the healthcare sector, the House Energy and Commerce Committee last week requested a “formal briefing” from medical transcription vendor Nuance Communications, Inc. concerning...more

McAfee Report Lists Health Care Sector as Most Targeted Industry for Cyber-Attacks

Robinson+Cole Data Privacy + Security Insider on 10/9/2017

In its cyber security incident report outlining vulnerabilities for the second quarter of 2017, security firm McAfee lists the health care sector as having suffered the most security incidents, which surpasses the public...more

Data Privacy + Cybersecurity Insider - October 2017

Robinson & Cole LLP on 10/5/2017

McAfee Report Lists Health Care Sector as Most Targeted Industry for Cyber-Attacks - In its cybersecurity incident report outlining vulnerabilities for the second quarter of 2017, security firm McAfee lists the health care...more

Global Privacy & Cybersecurity Update Vol. 15

Jones Day on 9/15/2017

UNITED STATES - Regulatory—Policy, Best Practices, and Standards - FTC Comments on Improvements to IoT Device Security - On June 19, the Federal Trade Commission ("FTC") submitted comments to a working group organized by the...more

HIPAA in the Age of Ransomware

Pullman & Comley - Connecticut Health Law on 7/11/2017

According to a recent US Government Interagency report, ransomware is the fastest growing malware threat, targeting users of all types, including health care facilities. This past spring, for example, the WannaCry ransomware...more

TortSource: Ransomware: A Reportable Breach?

Burr & Forman on 2/13/2017

In the past several years, a huge increase has occurred in the number of electronic attacks in the United States using ransomware, a form of malware that targets and encrypts critical data and systems for the purpose of...more

OCR Examines Hybrid Entity Designation in Latest HIPAA Settlement

Baker Donelson on 12/1/2016

On November 22, 2016, the University of Massachusetts Amherst (UMass) agreed to pay $650,000 and enter into a corrective action plan to settle allegations that it violated the HIPAA Privacy and Security Rules in connection...more

Recent CyberSecurity Incidents Emphasize Importance of Cyberinsurance

Akerman LLP - Health Law Rx on 10/28/2016

As the threat of cyberattacks continues to pose daily threats to businesses large and small, more companies have turned to cyber insurance products to shore up protection against these disruptive threats. A spate of recent...more

31 Results

View per page

Page: of 2

Cybersecurity › Malware › Health Insurance Portability and Accountability Act (HIPAA)

"My best business intelligence, in one easy email…"