Healthcare Finance News December 8, 2023
Lafourche Medical Group failed to conduct a risk analysis to identify potential threats or vulnerabilities, and will pay $480K to OCR.
The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) has reached a settlement with Lafourche Medical Group, a Louisiana medical group specializing in emergency medicine, occupational medicine and laboratory testing. The settlement resolves an investigation following a phishing attack that affected the electronic protected health information of about 34,862 people.
Phishing is a type of cybersecurity attack used to trick individuals into disclosing sensitive information through electronic communication, such as email, by impersonating a trustworthy source.
OCR said it was the first settlement it has resolved involving a phishing attack under the Health Insurance Portability...