The Chautauqua Center (TCC) in New York has disclosed a HIPAA breach by a business associate. The business associate’s error resulted in the protected health information of 747 physical and occupational therapy patients being made accessible to other covered entities. According to their notification letter to those affected, the breach occurred on December 22nd at…
Tennessee State, Southeastern Louisiana universities hit with cyberattacks
On March 2, Jonathan Greig reported: Two universities in Tennessee and Louisiana are struggling with cyberattacks that have crippled campus services and left students scrambling to find alternative tools. Tennessee State University — a public historically black land-grant university in Nashville — notified its more than 8,000 students on Wednesday that its IT systems were…
Medicare under attack: Healthcare data breaches increase fraud risks
Melissa D. Berry reports: Stealing Medicare beneficiary identification numbers has become the latest goal for cybercriminals who see this data as even more valuable than stolen credit cards. A South Florida man pled guilty in federal court in late-January to “conspiring to buy and sell more than 2.6 million Medicare beneficiary identification numbers” and other…
City of Modesto to notify people whose people information was accessed in last month’s ransomware attack
The Modesto Police Department is now acknowledging that a ransomware incident in early February might have exposed some people to the risk of identity theft. KCRA reports: On Thursday, the city said that it has been responding to a ransomware attack since last month and that a “limited amount” of the personal information of some…
Hacker stole bank account, Social Security numbers, and health plan info of Colorado school district employees
Updated March 15: This incident was reported to HHS on March 3 as affecting 35,068 health plan members, so it likely included former employees as well as current ones. DPS’s notice can be found on their website. Nate Lynn reports: Personal information belonging to some 15,000 Denver Public Schools (DPS) employees was stolen in what…
Another ransomware-related lawsuit settles: Preferred Home Care
Top Class Actions reports there is a settlement involving Preferred Home Care in New York. The lawsuit alleged the provider failed to protect employee and patient data from an attack in January 2021. The data breach allegedly compromised the information of 92,283 patients and employees, including sensitive health information and personal identifiers such as Social…