Healthcare Innovation February 26, 2024
Investigation of ransomware attack at Maryland-based behavioral health provider found evidence of potential violations of the HIPAA Privacy and Security Rules leading up to the breach
The U.S. Department of Health and Human Services Office for Civil Rights (OCR) has settled an investigation following a ransomware attack that affected the protected health information of more than 14,000 individuals. OCR noted that this marks the second settlement it has reached with a HIPAA-regulated entity for potential violations identified during an investigation of a ransomware attack.
The settlement is with Green Ridge Behavioral Health LLC, a Maryland-based practice that provides psychiatric evaluations, medication management, and psychotherapy.
In February 2019, Green Ridge Behavioral Health filed a breach report with OCR stating that its...