Pulse December 8, 2023
The Office for Civil Rights is stepping up its attention to cyberattacks impacting healthcare organizations. After years of attacks impacting operations and the privacy of patient information, OCR is now flexing its HIPAA enforcement muscles on that front. First OCR entered into a settlement because of a ransomware attack and now there is a new settlement stemming from a phishing incident.
The Background and the Settlement
What happened in the most recent instance? As usual, OCR offers a bare minimum of detail about the situation giving rise to the settlement. The available facts note that Lafourche Medical Group (“LMG”) notified OCR of a data breach impacting the patient information under its control on May 28, 2021. LMG revealed that it...