cybersecurity breaches in the news
- The Office for Civil Rights in the Department of Health & Human Services (aka HIPAA police) sent out press release stating that they have now documented 5,000 major data breaches of PHI since 2009, when it first started tracking breaches
- 369 million people have had their PHI exposed
- 25% of all ransomware attacks are aimed at healthcare vertical, making it top target
- 91% are concerned about ransomware attacks – SonicWall survey
- Regions Hospital of Saint Paul, MN notified 980 patients that their PHI was exposed after cyber attack.
- Michigan Medicine, headquartered in Ann Arbor, MI, notified 33,850 patients that their PHI was exposed after email phishing attack.
- Radiology Associates of Albuquerque, NM (aka RAA Imaging) notified an unknown number of patients that their PHI was exposed after cyber attack.
- The Valley Hospital of New Jersey notified an unknown number of patients that their PHI was exposed after paper records were found in local dumpster.
- CareOregon notified 8,000 patients that their PHI was exposed after a direct mailing error.
- Main Line Women’s Healthcare of Pennsylvania notified 800 patients that their PHI after an employee stole the information.
- Country Doctor Community Clinic of Seattle, WA notified 38,751 patients that their PHI was exposed after cyber attack
- Riverside Medical Group of New Jersey notified 12,499 patients that their PHI was exposed after cyber attack.
- Indianapolis Housing Authority notified an unknown number of residents that their info was expose after ransomware attack.
- Kenosha Unified School District of Wisconsin notified an unknown number of students that their info may have been exposed after Snatch Team ransomware attack.
- Drizly Corp. is under investigation by the FTC as a result of a data breach which exposed info on 2.5 million customers.
- The Delaware Department of Health and Social Services notified 7,074 patients that their PHI was exposed after it was accidentally made available on a publicly accessible website.
- Davenport Community Schools of Iowa notified an unknown number of students that their info may have been exposed after Karakurt ransomware attack.
- Rhode Island Public Transit Authority was sued by the American Civil Liberties Union as a result of a large data breach that exposed info on 22,000 people.