The University of Massachusetts Amherst (UMass) has agreed to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules. The settlement includes a corrective action plan and a monetary payment of $650,000, which is reflective of the fact that the University operated at a financial loss in…
Month: November 2016
@Kapustkiy and @CyberZeist hack a human rights foundation (UPDATED)
Yesterday, two hackers known on Twitter as @Kapustkiy and @CyberZeist claimed that they teamed up to hack the Hungarian Human Rights Foundation. The hack was announced on Twitter. Because CyberWarNews.info has already provided a helpful summary of the leak, which was posted on Pastebin, I’ll quote Lee’s summary: a list of tables from the breached…
Update: Hacker dumps stolen Casino Rama information online
CTV reports: A collection of personal and private information stolen during the Casino Rama cyberattack has been dumped online. A five gigabyte file containing more than 14,000 documents was uploaded to a torrent website on Monday. The information belongs to people who’ve won big at the casino and former employees. The files contain social insurance…
Bryan Cave Data Security Breach Handbook – 2016
From Bryan Cave, this free resource on Incident Readiness and Response: Since the first publication of this handbook in 2014, the legal ramifications for mishandling a data security incident have become more severe. In the United States, the number of federal and state laws that claim to regulate data security has mushroomed. The European Union has also…
Former Owner of Florida Pharmacy Convicted at Trial of $700,000 Medicare Fraud Scheme
More medical identity theft for fraud: The former owner of a Miami based retail pharmacy was convicted, following a three-day trial, for his participation in a scheme that involved the fraudulent submission of approximately $700,000 dollars in false billing to Medicare. Andres Alfonso, 54, of Miami, was convicted of three substantive counts of health care…
Wentworth-Douglass reports insider breach at business associate, Ambucor (UPDATE5)
First it was Carolina Cardiology Consultants disclosing that 2500 of their patients had been affected by a breach at their business associate, Ambucor. Then it was Lebanon Cardiology Associates, PC (now known as WellSpan Cardiology) notifying HHS that 537 of their patients had been affected by Ambucor’s incident. Now it’s Wentworth-Douglass Hospital notifying 775 of their patients of the breach….