Ransomware Inevitable, Lack of Readiness Not
HealthIT Answers October 23, 2024
By Matt Fisher, Healthcare Attorney
On September 26, 2024, the Office for Civil Rights announced another settlement stemming from a ransomware attack. The settlement is just the latest one imposed by OCR stemming from a cyberattack. It may feel like rubbing salt in a wound, but the details behind the settlement (at least the minimum ones available) provide a little bit more insight.
The Settlement Details
The settlement involved Cascade Eye and Skin Centers, P.C. (Cascade). As indicated by OCR, information was received by OCR on May 26, 2017 that Cascade experienced a ransomware attack in March of 2017. The settlement does not state how OCR received the information. Did Cascade voluntarily report the ransomware attack? Did a news article...