Some 5,100 patients treated at Kaiser Permanente were sent HIPAA breach notification letters Friday after a KP research computer was found to have been infected with malicious software. Officials say ...

On September 30th, 2025, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Cadia Healthcare Facilities ...

A state health agency is mailing out HIPAA breach notification letters after a technical glitch sent out letters containing protected health information to the wrong recipients. Colorado Department of ...

An ASC in Liverpool, N.Y., has reached a settlement with the U.S. Department of Health and Human Services Office for Civil Rights over alleged violations of the HIPAA Security and Breach Notification ...

How quickly must a HIPAA breach be reported? According to HHS, for breaches affecting 500 or more people, the covered entity must report it to HHS without unreasonable delay and in no case later than ...

HIPAA violations don't always come from malicious attacks or headline-making data breaches. More often, they stem from everyday mistakes, like misdirected emails and vendors that aren't as secure as ...

Tier 4 Willful neglect—not corrected: This is the most serious civil offense. It occurs when a business knowingly violates HIPAA and doesn’t address the issue within the allowed timeframe. Vanta ...