News & Analysis as of May 8, 2025

Cybersecurity › Vulnerability Assessments › Health Insurance Portability and Accountability Act (HIPAA)

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

The Why Behind the HHS Proposed Security Rule Updates

Bradley Arant Boult Cummings LLP on 2/27/2025

In this week’s installment of our blog series on the U.S. Department of Health and Human Services’ (HHS) HIPAA Security Rule updates in its January 6 Notice of Proposed Rulemaking (NPRM), we are exploring the justifications...more

New Year, New HIPAA Security Rule?

Dinsmore & Shohl LLP on 1/9/2025

Citing the “alarming growth” of cyberattacks in recent years, the U.S. Department of Health and Human Services (“HHS”) has issued a Notice of Proposed Rulemaking to modify the Health Insurance Portability and Accountability...more

OCR Says HIPAA Audits Will Resume: OIG Makes Recommendations for Enhancement

Foley & Lardner LLP on 12/10/2024

Recognizing the increasing number of successful cyberattacks targeting health care organizations and their valuable patient data, the Office of the Inspector General (OIG) is calling for enhancements to the HIPAA audit...more

OCR Will Focus on You if You Don’t Focus on Cybersecurity

Akerman LLP - Health Law Rx on 12/21/2023

With a couple of “firsts,” the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) is signaling that it is cracking down on healthcare organizations that fail to identify and address cybersecurity...more

New York State Prepares to Regulate Hospital Cybersecurity Programs

Mintz - Health Care Viewpoints on 11/29/2023

On November 13, 2023, Governor Kathy Hochul announced plans to regulate cybersecurity for New York general hospitals regulated under Article 28 of the Public Health Law. As proposed, the regulations will provide an additional...more

Privacy Briefs: June 2023

Health Care Compliance Association (HCCA) on 6/9/2023

Privacy Briefs: June 2023 - Long-term care pharmacy network PharMerica disclosed a breach involving more than 5.8 million patients, making it the largest breach reported to the HHS Office for Civil Rights (OCR) in the last...more

What is an Information Security Framework and Why Do I Need One?

J.S. Held on 6/7/2023

An information security framework, when done properly, will allow any security leader to more intelligently manage their organization's cyber risk. The framework consists of a number of documents that clearly define the...more

Emerging Threats: Cyber Attacks and Side-Channel Evolution

Polsinelli on 12/15/2022

“Side-Channel” attacks generally refer to a type of criminal cyber attacker activity that exploits vulnerabilities so that the attacker can collect and analyze “leakage” of data from a device, as a means to identify certain...more

Health Care Organizations Warned of Venus Ransomware

Robinson+Cole Data Privacy + Security Insider on 11/23/2022

The Health Care Sector Cybersecurity Coordination Center (IC3) recently released an Analyst’s Note to health care organizations providing information on a new variant of ransomware called Venus (also known as GOODGAME)....more

Privacy Tip – Health Care Sector Continues to Be Hit with Ransomware

Robinson+Cole Health Law Diagnosis on 6/29/2022

According to the 2022 State of Ransomware Report issued recently by Sophos, it surveyed 5,600 IT professionals from 31 countries, including professionals in the health care sector. Those professionals in the health care...more

Data Privacy + Cybersecurity Insider - December 2021

Robinson & Cole LLP on 12/13/2021

CYBERSECURITY - Joint CISA/FBI Alert on Vulnerability in Zoho ManageEngine ServiceDesk Plus - On December 6, 2021, the Cybersecurity & Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI)...more

Data Privacy + Cybersecurity Insider - April 2021

Robinson & Cole LLP on 4/2/2021

CYBERSECURITY - GAO Report Identifies Need for DOE to Address Risks to Electrical Distribution System - The United States Government Accountability Office (GAO) recently completed and published a study on electricity...more

Joint Federal Agency Advisory Warns of Imminent Ransomware Threats to the Healthcare and Public Health Sector

Bilzin Sumberg on 10/30/2020

As if the recent uptick in national COVID-19 cases and hospitalizations were not enough to tax an already beleaguered health system, on October 28, 2020, three federal agencies issued a cybersecurity Joint Advisory warning of...more

Ransomware Targeting Hospitals and Healthcare Providers

Akerman LLP - Health Law Rx on 10/30/2020

While fighting a surge of new coronavirus infections in many parts of the country, healthcare providers must also be prepared to defend against ransomware. On October 28, 2020, the FBI, the U.S. Department of Health and Human...more

Data Privacy + Cybersecurity Insider - April 2020

Robinson & Cole LLP on 4/6/2020

Microsoft Issues Cybersecurity Risk Warning and Offers Help to Hospitals During COVID-19 Crisis - On April 1, 2020, Microsoft issued a specific warning to health care entities alerting them that they are at particular risk...more

Data Privacy + Cybersecurity Insider - February 2020

Robinson & Cole LLP on 2/7/2020

Researchers at Sentinel One and Dragos have detected malicious code, called EKANS or Snake, that has been designed specifically to target industrial control systems (ICS), including those of oil refineries, manufacturing...more

Data Privacy + Cybersecurity Insider - April 2019 #4

Robinson & Cole LLP on 4/29/2019

According to Hiscox’s Third Cyber Readiness Report, which surveyed 5,400 firms in the U.S. and the E.U., cyber threats have “become the unavoidable cost of doing business today.” The Report notes that for the first time, “a...more

Data Privacy + Cybersecurity Insider - December 2018 #3

Robinson & Cole LLP on 12/27/2018

For data security buffs like me, the recent McAfee® Labs Threats Report, December 2018 is, or should be, a top pick on the list. Well, maybe not for the holiday reading list. We need to be careful not to bring up the results...more

Post-market medical devices, cybersecurity, and the U.S. FDA’s growing concerns

Hogan Lovells on 1/17/2018

From insulin pumps and pacemakers to defibrillators, medical devices increasingly rely on wireless and internet connectivity for efficient operations. Unfortunately, these interconnections also leave devices vulnerable to an...more

19 Results

/

View per page

Page: of 1