Healthcare Continues to Be High-Value Target for Cyber Attacks

Cyber attacks affecting healthcare organizations show no sign of easing.  A recent report by Comparitech identified at least 172 ransomware attacks on healthcare organizations since 2016.  Comparitech utilized data from the Department of Health and Human Services,...

First Prosecution under EKRA Results in Guilty Plea

In a press release issued last month, the Department of Justice announced its first criminal prosecution under the Eliminating Kickback in Recovery Act (EKRA).  Defendant Theresa Merced – who is 80 years old – pled guilty and admitted to soliciting kickbacks from a...

Leap Year Means a February Deadline for HIPAA Breach Notifications

The HIPAA Breach Notification Rule requires covered entities, business associates, vendors of personal health records, and other third-party service providers handling protected health information to notify individuals and entities (depending on magnitude) of a breach...