Medical management company to pay $100K in landmark HHS ransomware case
By 
Kyle Brasseur2023-11-01T22:10:00
A Massachusetts-based medical management company agreed to pay $100,000 in settling the first ransomware agreement under the Health Insurance Portability and Accountability Act (HIPAA) reached by the Department of Health and Human Services’ Office for Civil Rights (HHS OCR).
Doctors’ Management Service filed a breach report with the HHS in April 2019 regarding a ransomware attack that impacted more than 200,000 individuals, the agency said in a press release Tuesday. The company first detected the breach in December 2018, though it determined the initial access dated back to April 2017.
The HIPAA privacy, security, and breach notification rules set requirements regulated entities must follow to protect the privacy and security of health information.
THIS IS MEMBERS-ONLY CONTENT
You are not logged in and do not have access to members-only content.
If you are already a registered user or a member, SIGN IN now.
Related articles
-
News BriefLafourche Medical Group to pay $480K in landmark HHS phishing action
Louisiana-based Lafourche Medical Group agreed to pay $480,000 as part of the first phishing attack-related settlement the Department of Health and Human Services’ Office for Civil Rights has reached under the Health Insurance Portability and Accountability Act.
-
News BriefMedical center to pay $80K for Covid-19 patient info shared with media
Saint Joseph’s Medical Center agreed to pay $80,000 as part of a settlement with the Department of Health and Human Services’ Office for Civil Rights for potential violations of the Health Insurance Portability and Accountability Act.
-
News BriefHHS orders L.A. Care to pay $1.3M over apparent HIPAA violations
L.A. Care Health Plan agreed to pay $1.3 million to settle allegations by the U.S. Department of Health and Human Services it potentially violated the Health Information Portability and Accountability Act.
More from Regulatory Enforcement
-
ArticleSFO head to step down as speculation grows over future of agency
Nick Ephgrave, director of the U.K.’s main anti-corruption enforcement agency, the Serious Fraud Office, will retire at the end of March—about halfway through his appointed five-year term. Experts say he leaves the agency in a lot better position than he joined it in September 2023.
-
News BriefFTC puts GM’s puts connected vehicle data practices under compliance spotlight
The U.S. Federal Trade Commission finalized its order against General Motors and its OnStar subsidiary over the improper usage of geolocation and driving behavior data of drivers.
-
ArticleKaiser plans pay $556M to settle Medicare upcoding allegations
Kaiser Health affiliates have agreed to pay more than $556 million to settle allegations originally made by whistleblowers that they ignored compliance department warnings and unlawfully reworked diagnoses for Medicare patients in order to receive higher payments from the federal government.