OCR settles its first ransomware case
Lexology November 22, 2023
Last month, more than seven years after it first issued guidance on ransomware and the implication of such attacks under HIPAA, the Office for Civil Rights announced its first settlement involving a ransomware attack.
Doctors’ Management Services, a business associate, will pay OCR $100,000 to resolve a breach stemming from a 2018 ransomware attack that impacted 206,695 individuals.
The settlement serves as a...