Marcy Wilder, Scott Loughlin, Melissa Bianchi, Paul Otto, and Alyssa Golay of Hogan Lovells write: This week the U.S. Department of Health and Human Services, the agency responsible for HIPAA enforcement, announced the formation of three new divisions within the Office for Civil Rights (“OCR”). The new divisions – Enforcement, Policy, and Strategic Planning –…
UK: WHSmith targeted by hackers in cyber attack as company data at risk
Natalie Rees reports: High street retailer WHSmith has reported it has been the target of a cyber attack with hackers accessing company data. The company said information regarding current and former employees had also been accessed by hackers during the security breach. Bosses of the established retailer said the situation does not impact its trading…
Lubbock Heart and Surgical Hospital sued for breach where no one knows for sure whether data was accessed or acquired
If the victim of a cyberattack cannot determine whether data was accessed or acquired, should that increase the damages sought by plaintiffs in a class action suit? Or should it get the suit tossed out because the plaintiffs can’t prove any theft of their data? Kelly Mehorter reports about a class action lawsuit filed against…
Little Rock school district seeks cyberattack disclosure guidance
Arkansas Online reports: The Little Rock School District is continuing to seek an attorney general’s opinion on the legality of holding private school board meetings when reacting to a cyber- or ransomware attack on a district’s electronic information systems. Little Rock Superintendent Jermall Wright sent a lengthy letter in January to the attorney general’s office…
HK: Doctor suspended over medical records breach
A doctor has been suspended from clinical duties and reported to the police on suspicion of accessing medical records without their subject’s consent. A spokesman for North District Hospital said in a statement published on Tuesday night that they discovered the breach after a member of staff reported that she suspected her medical records had…
Texas waited two months to start informing 3,000 people that crooks copied their driver’s licenses. DPS explains why.
Jasper Scherer reports: After discovering in December that an organized crime group had obtained thousands of replacement Texas driver licenses, state public safety officials waited more than two months to publicly reveal the breach and start notifying those swept up in the operation. The criminal effort, disclosed to lawmakers Monday by Texas Department of Public Safety Director…