Healthcare Hack: PHI For Sell On The DarkNet - Ep 66

We first talked about this in Ep 62. Darknet sale of healthcare records. Now, more information is coming out and it gets more unfortunate for patients every time we read more.

Deep Dot Web broke the news: https://www.deepdotweb.com/2016/06/26/655000-healthcare-records-patients-being-sold/

We picked it up on Data Breaches.net because they were trying to figure out who the entities actually were in each case: https://www.databreaches.net/damn-anyone-know-what-facilities-these-are/

Get more info at https://HelpMeWithHIPAA.com/66

Check out the latest episode!

OCR resolution agreement - OHSU - EP 65

What happened?

• March 23, 2013 Oregon Health & Science University notified HHS of a breach due to a stolen unencrypted laptop.
• May 1, 2013 OCR notifies them they are investigating the incident
• July 28, 2013 Oregon Health & Science University notified HHS of another breach resulting from storing ePHI at an internet-based service provider without a business associate agreement
• November 8, 2013 OCR notifies them they are investigating the new incident
• July 18, 2016 settlement announced for $2.7 million and a 3 year CAP

 

What can we learn from this?  Go to Help Me WithHIPAA.com/65

Check out the latest episode!

Security Incident Response Plan - Ep 64

OCR recently sent out a message on their list serve asking if your CE or BA was ready for an incident. We have been discussing a lot of this kind of stuff lately so it is nice for them to bring it up. I have been looking at various Incident response reports and was working on an episode anyway.

For more information go to HelpMeWithHIPAA.com/64

Check out the latest episode!

Medical Device Security - Ep 63

There has been a lot of news and industry discussions about Medical Device security. Medical Devices are just like a computer, so they also need security to protect the information on them.

 

For more go to HelpMeWithHIPAA.com/63

Check out the latest episode!

Business Associate Breaches In The News - Ep 62

Check out the latest episode!

Healthcare Data Breach Study - Ep61

Since 2010, ID Experts has sponsored this Ponemon Institute study which has been tracking data breach trends of patient data at healthcare organizations. The annual economic impact of a data breach has risen over the past six years, as has the frequency of data breaches. Criminal attacks and internal threats are the leading cause of healthcare breaches. Evolving cyber attack threats such as ransomware and malware are of primary concern for 2016. At the same time, internal issues such as employee negligence, third-party snafus, and stolen computing devices continue to put patient data at risk.

For more info on this episode go to helpmewithhipaa.com/61

Check out the latest episode!

HIPAA Rules In A Crisis - Ep 60

As always, during times of crisis and chaos things do become confused and incorrect statements are made. It is a normal occurrence in troubling situations. But, we need to address it specifically to clear up a few points.

1. There was no "special waiver from the White House". There was no need for one at all.
2. People, even in a crisis, should not be invoking HIPAA over caring for the patient properly.
3. The hospitals talked about implementing their crisis plan - why wasn't HIPAA addressed in the plan. It should be!

For more details go to HelpMeWithHIPAA.com/60

Check out the latest episode!