Yakima Valley Memorial Hospital has settled with the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) for $240,000 after security guards accessed medical records without authorization. The hospital will update policies and procedures to protect patient information and train employees to prevent future breaches. OCR Director Melanie Fontes Rainer stressed the …
The Federal Trade Commission (FTC) has reached a settlement with genetic testing firm 1Health.io over charges of failing to protect the privacy and security of DNA data and making unfair changes to its privacy policy. The FTC accused 1Health.io, formerly known as Vitagene, of deceiving consumers about its privacy and security practices. The company allegedly …
St. Joseph’s Medical Center has settled with the Office for Civil Rights (OCR) over a HIPAA investigation regarding the disclosure of patients’ protected health information to a news reporter. The medical center provided a national media outlet with access to COVID-19 patients’ information without obtaining written authorization. OCR determined that three patients’ information was disclosed, …
Read more “Disclosure of Patients’ Protected Health Information to a News Reporter”
In today’s rapidly evolving digital landscape, where cyber threats and vulnerabilities continually emerge, it’s obvious that eliminating all risk is impossible. Yet, there’s a powerful strategy that can help address your organization’s most critical security gaps, threats and vulnerabilities — comprehensive cyber risk management. It goes beyond technical controls and considers organizational factors such as …
Read more “How Effectively Managing Risk Bolsters Cyber Defenses”
Keeping sensitive data and critical tech safe from cyberattacks is crucial for businesses like yours. Your survival and growth depend on how well your organization can withstand cyber threats. That’s where cyber risk management comes into play. Businesses with solid cyber risk management strategies can build formidable cyber defenses and reduce risks without compromising business …
Read more “How to Achieve Strategic Cyber Risk Management With NIST CSF”
When creating a budget for your business, it’s important to remember that technology costs are more than just operational expenses. They should be considered an investment that can drive your organization toward unprecedented productivity, growth, and profitability. Your technology budgeting process shouldn’t just be about numbers and spreadsheets. Instead, it should be about shaping the …
Digital transformation is necessary for all businesses that want to thrive in today’s competitive market. It helps businesses like yours win new customers, improve efficiency, and increase profits. However, due to several misconceptions, many business owners hesitate to take the digital plunge. In this blog, we’ll discuss the most common digital transformation misconceptions and share …
The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) has settled a ransomware cyber-attack investigation with Doctors’ Management Services, a Massachusetts medical management company. The $100,000 settlement resolves a breach report regarding a ransomware attack that affected the health information of over 200,000 individuals. Doctors’ Management Services will be monitored …
Read more “HHS’ Office for Civil Rights Settles Ransomware Cyber-Attack Investigation”
The Federal Trade Commission (FTC) has amended the Safeguards Rule to require non-banking financial institutions to report data security breaches. This amendment applies to institutions that discover unauthorized acquisition of information affecting 500 or more people. The Safeguards Rule already requires these institutions to have comprehensive security programs in place. The amendment aims to increase …
Phishing scams remain one of the most prevalent and successful types of cyberattacks today, so being aware of the danger they pose to businesses like yours is extremely crucial. Your business could easily be the next victim if you don’t clearly understand how threat actors leverage phishing emails. In this blog, you’ll learn the intent …