Tag: HIPAA
-
Hospital Cyberattacks Bring Disruptions, Legal Fallout
New Mexico, Ohio Ransomware Attacks Raise Concerns as Feds Settle Pennsylvania Case. Cyber incidents at university health systems in New Mexico and Ohio disrupted patient care and sparked data theft concerns and litigation. Meanwhile, a Pennsylvania health system faces an $800,000 HIPAA settlement over a 2023 ransomware attack that exposed sensitive cancer patient photos. First…
-
Ambulance Firm’s $1M Settlement Mandates Data Destruction
State Deal Follows 2023 Hack of Archived Data and Resolves Separate Fraud Claims. A former ambulance company has agreed to pay Massachusetts regulators $1 million to resolve allegations of Medicaid billing fraud and also that the firm violated HIPAA and state data security regulations in failing to protect patient and employee data in a 2023…
-
Guide to Compliance and Cybersecurity in Healthcare Software Development
Compare five healthcare software development firms and learn how to build secure, compliant products under HIPAA, GDPR and FDA requirements. First seen on hackread.com Jump to article: hackread.com/compliance-cybersecurity-healthcare-software-development/
-
US Senate Unanimously Passes Health Cyber Bill
All Eyes for HIPAA and Regulatory Reform Are Focused on the House. The U.S. Senate on Thursday unanimously passed a bipartisan bill that proposes to bolster health sector cybersecurity and resiliency. Among other provisions, the bill calls for regulators to raise the bar on minimum cyber best practices for healthcare sector organizations. First seen on…
-
Ambry Genetics Pays $700K HIPAA Fine in Phishing Breach
Settlement Comes After Firm Paid Nearly $12.3M to Settle Civil Claim for Same Hack. A genetics testing lab has agreed to pay a $700,000 HIPAA settlement and improve its security practices in the wake of a 2020 phishing hack that affected 225,370 patients. The firm paid a $12.25 million civil class action settlement in 2023…
-
Philadelphia’s CISOs to Watch: Securing Health Systems and Heavy Industry
The Delaware Valley runs on two industries that could not be less alike in culture and are nearly identical in regulatory weight. On one side are the health systems, insurers, and pharmaceutical companies, governed by HIPAA and HITRUST and holding… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/philadelphias-cisos-to-watch-securing-health-systems-and-heavy-industry/
-
HIPAA Risk Assessments 2026: Continuum GRC Healthcare Audits
In 2026, healthcare organizations face increasing pressure to maintain robust data protection measures under evolving regulatory landscapes. HIPAA risk assessments remain a cornerstone of compliance, helping providers identify vulnerabilities and safeguard protected health information. As cyber threats grow more sophisticated, proactive compliance assessments become essential for decision-makers seeking to minimize liability and ensure operational resilience.”¦…
-
How Much Does HITRUST Certification Cost?
HITRUST certification cost is one of the most consistently underestimated line items in HealthTech compliance budgeting, largely because it gets lumped in mentally with a HIPAA risk assessment when the two are very different scopes of work. The post How Much Does HITRUST Certification Cost? appeared first on Packet33. First seen on securityboulevard.com Jump to…
-
What Are the Key Components of HIPAA? A Detailed Breakdown for 2026
Key Takeaways HIPAA compliance continues to evolve in 2026, but organizations need to distinguish between current requirements and proposed changes. HHS has proposed a substantial update to the HIPAA Security Rule. Until that proposal is finalized, however, covered entities and business associates must continue complying with the Security Rule currently in effect. Understanding the Core……
-
MSP HIPAA Compliance: What Managed Service Providers Need to Know
Originally published at MSP HIPAA Compliance: What Managed Service Providers Need to Know by Mike Anderson. Managed service providers play an important role in … First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/msp-hipaa-compliance-what-managed-service-providers-need-to-know/
-
SOC 2 vs HIPAA Pentest Requirements for HealthTech Startups
Key Takeaways SOC 2 does not explicitly name penetration testing as mandatory, but auditors expect one in practice for any company handling sensitive data at scale. HIPAA does not name penetration testing as a required control either, it requires a risk analysis, and a pentest is the most common way companies demonstrate one was performed…The…
-
SOC 2 vs HIPAA Pentest Requirements for HealthTech Startups
Key Takeaways SOC 2 does not explicitly name penetration testing as mandatory, but auditors expect one in practice for any company handling sensitive data at scale. HIPAA does not name penetration testing as a required control either, it requires a risk analysis, and a pentest is the most common way companies demonstrate one was performed…The…