Owner of Apple of Your Eye Healthcare Services, Inc. Sentenced to 210 Months in Prison for Role in Fraud Conspiracy

DALLAS — Wilbert James Veasey, Jr., 65, of Dallas, was sentenced this morning in federal court in Dallas on a health care fraud conspiracy conviction, announced U.S. Attorney John Parker of the Northern District of Texas. Veasey was sentenced by U.S. District Judge Sam A. Lindsay to 210 months in federal prison and order to…

Read More

Careless handling of HIV information jeopardizes patient’s privacy, costs hospital $387k

St. Luke’s-Roosevelt Hospital Center Inc. (St. Luke’s) has paid the U.S. Department of Health and Human Services (HHS) $387,200 to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule and agreed to implement a comprehensive corrective action plan. St. Luke’s operates the Institute for Advanced Medicine, formerly Spencer…

Read More

$2.5 million settlement shows that not understanding HIPAA requirements creates risk

The U.S. Department of Health and Human Services, Office for Civil Rights (OCR), has announced a Health Insurance Portability and Accountability Act of 1996 (HIPAA) settlement based on the impermissible disclosure of unsecured electronic protected health information (ePHI). CardioNet has agreed to settle potential noncompliance with the HIPAA Privacy and Security Rules by paying $2.5…

Read More

Texas Health System Settles Potential HIPAA Disclosure Violations

Memorial Hermann Health System (MHHS) has agreed to pay $2.4 million to the U.S. Department of Health and Human Services (HHS) and adopt a comprehensive corrective action plan to settle potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. MHHS is a not-for-profit health system located in Southeast Texas, comprised of…

Read More

No Matter How Much You Spend On Technology, You’re Only As Secure As You’re Most Gullible Employee

Companies and organizations around the world potentially faced substantial costs after hackers threatened to keep computers disabled unless victims paid $300 or more in ransom, the latest and most brazen in a type of cyberattack known as “ransomware.” The malware hit Britain’s beloved but creaky National Health Service particularly hard, causing widespread disruptions and interrupting…

Read More

$5.5 million HIPAA settlement shines light on the importance of audit controls

Memorial Healthcare System (MHS) has paid the U.S. Department of Health and Human Services (HHS) $5.5 million to settle potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules and agreed to implement a robust corrective action plan. MHS is a nonprofit corporation which operates six hospitals, an…

Read More

Children’s Medical Center of Dallas Pays Penalty of 3.2 Million for HIPAA and Compliance Violations

The U.S. Department of Health and Human Services, Office for Civil Rights (OCR), has announced a Health Insurance Portability and Accountability Act of 1996 (HIPAA) civil money penalty against Children’s Medical Center of Dallas (Children’s) based on its impermissible disclosure of unsecured electronic protected health information (ePHI) and non-compliance over many years with multiple standards…

Read More

Ransomware Infection Results in Patients PHI Being Encrypted

Another healthcare provider has announced that a ransomware infection has resulted in patients’ protected health information being encrypted, and potentially accessed, by cybercriminals. The Susan M. Hughes Center, a provider of aesthetic medicine and cosmetic surgery services in New Jersey and Philadelphia, discovered ransomware had been installed on its computer system on August 30, 2016.…

Read More

First HIPAA enforcement action for lack of timely breach notification settles for $475,000

The U.S. Department of Health and Human Services, Office for Civil Rights (OCR), has announced the first Health Insurance Portability and Accountability Act (HIPAA) settlement based on the untimely reporting of a breach of unsecured protected health information (PHI).  Presence Health has agreed to settle potential violations of the HIPAA Breach Notification Rule by paying…

Read More

Why OCR is turning up the heat on business associates

The HIPAA spotlight is beginning to shine brightly on business associates. Covered entities have long had their time to star, so it is only fair to share the stage now. It is likely that covered entities are only too happy to have the Office for Civil Rights and others focus attention on business associates, with…

Read More