The Department of Health and Human Services (HHS) has reached a $90,000 settlement with Oklahoma-based Bryan County Ambulance Authority (BCAA) to settle a potential violation of the Health Insurance and Portability and Accountability Act of 1996 (HIPAA) Security Rule linked to a ransomware attack against BCAA that breached the provider’s encrypted files and impacted more than 14,000 of its patients.   […]

The Federal Trade Commission (FTC) and the Department of Health and Human Services (HHS) Office for Civil Rights warned hospitals and telehealth providers of potential privacy and security risks embedded in their websites and applications. […]

To help healthcare organizations protect patients’ personal health information, the National Institute of Standards and Technology (NIST) has updated its cybersecurity guidance for the healthcare industry. […]