Healthcare Compliance Journal

Mission Community Hospital operator Deanco Healthcare, LLC has agreed to a $1,546,409.42 settlement to resolve consolidated class action claims arising from a cyberattack discovered on May 1, 2023 that exposed patient information, including PHI, belonging to 269,547 individuals. The cyberattack…

Former Maryland hospital pharmacist Matthew Bathula has been indicted over allegations of an eight-year cyber intrusion and surveillance campaign involving unauthorized access to employer systems, credential theft affecting nearly 200 individuals, and the installation of spyware during his employment at…

Monroe University confirmed that unauthorized access to its computer systems in December 2024 resulted in the compromise of the personal data and health information of around 320,973 individuals. Incident Details The University detected the cyberattack on December 23, 2024 and…

Physician-owned radiology practice, Consulting Radiologists Ltd., decided to settle a class action data breach lawsuit. The provider offers medical imaging services to more than 100 healthcare facilities in Minnesota and the surrounding places. Consulting Radiologists reported the data breach to…

In medical terms, HITECH, which stands for Health Information Technology for Economic and Clinical Health, refers to a set of regulations and initiatives introduced in the United States to promote the adoption and meaningful use of electronic health records (EHRs)…

HITECH strengthened HIPAA by introducing provisions that required the implementation of electronic health records, increased penalties for non-compliance, established breach notification requirements, and promoted the adoption of advanced security measures to safeguard protected health information, resulting in an enhanced overall…

Texas HB 300, also known as the Texas Medical Records Privacy Act, imposes strict requirements on healthcare providers operating in the state, mandating safeguards for protected health information, including the implementation of privacy policies, employee training programs, and security measures…

To comply with Texas HB 300, organizations handling sensitive personal information are advised to adhere to data breach notification best practices, including promptly investigating and identifying security incidents, notifying affected individuals and relevant authorities in a timely manner, providing detailed…

Preliminary 2024 statistics indicate a noticeable drop in the number of deaths in the workplace, particularly in places that have focused enforcement resources provided by the Occupational Safety and Health Administration (OSHA) of the Department of Labor. In 2024, OSHA…

Non-compliance with OSHA (Occupational Safety and Health Administration) regulations can result in penalties for employers, including monetary fines, citations, increased scrutiny, potential legal action, and in extreme cases, temporary or permanent shutdown of the workplace, emphasizing the importance of adhering…

Researchers have made a groundbreaking discovery in the field of brain blood clot clearance with the development of a new tool and technique utilizing vortex ultrasound. The revolutionary approach uses ultrasonic waves in the form of a "tornado" to effectively…

A new study published in Frontiers in Global Women's Health has unveiled a remarkable development in enhancing the safety of pregnancy. The low-cost sensing glove, priced at only $1, was created to support healthcare staff in identifying fetal position and…

In a move to strengthen consumer protection and enhance transparency, the Federal Trade Commission (FTC) has finalized revisions to its Health Breach Notification Rule (HBNR), targeting digital health applications that handle sensitive personal health information. These changes are designed to…

Blue Shield of California's recent rollout of its digital musculoskeletal (MSK) pain treatment programs on the Wellvolution platform signifies an expansion of its healthcare services aimed at addressing a wide range of MSK conditions that affect nearly half of the…

In a significant move to enhance cybersecurity in rural hospitals, the Senate Homeland Security and Governmental Affairs Committee has advanced the Rural Hospital Cybersecurity Enhancement Act. Rural hospitals, often seen as soft targets due to a dearth of skilled cybersecurity…

The American Hospital Association (AHA), a prominent body representing an array of nearly 5,000 healthcare organizations, hospitals, health systems, affiliated physicians, nurses, and caregivers, has recently penned a significant letter to Melanie Fontes Rainer, the Director of the Office of…

Erie Indemnity Corp., based in Pennsylvania, also known as Erie Insurance, is inspecting a network attack. Erie Insurance, one of the Fortune 500 companies, offers a selection of insurance plans, which include life insurance, car insurance, Medicare supplements, and cyber…

Kroll's Data Breach Outlook 2025 report also reveals interesting information about cyberattacks on other sectors. Professional services, education, retail, and technology had fewer attacks. Cyberattacks on the technology sector dropped by 46%, education attacks fell by 38%, and retail attacks…