Conti member indicted for role in 2021 Scripps Health ransomware attack

On September 7, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC), in coordination with the United Kingdom, sanctioned 11 individuals who are alleged to be part of the Russia-based Trickbot cybercrime group. At the same time… Continue reading Conti member indicted for role in 2021 Scripps Health ransomware attack

Texas Medical Liability Trust updates its data breach notification; now provides notification on behalf of almost 60,000 individuals

In March, Texas Medical Liability Trust on behalf of itself and its affiliates, Texas Medical Insurance Company, Physicians Insurance Company, and Lone Star Alliance, Inc., a Risk Retention Group (collectively “TMLT”) filed a breach notification with t… Continue reading Texas Medical Liability Trust updates its data breach notification; now provides notification on behalf of almost 60,000 individuals

St. Paul Public Schools notifies families of data breach from February

KSTP reports: St. Paul Public Schools notified families and staff last week of a “data security incident” last winter that may have exposed students’ names and email addresses. In a letter sent out on Friday, the district said it became aware of the is… Continue reading St. Paul Public Schools notifies families of data breach from February

Hospital Sisters Health System’s CFO exits as it continues to handle ‘cybersecurity incident’

On August 29, DataBreaches reported that Hospital Sisters Health System (HSHS) and Prevea Health appeared to have been the victims of a ransomware attack. As of today, the notice on Prevea Health states, “HSHS and Prevea are experiencing a system… Continue reading Hospital Sisters Health System’s CFO exits as it continues to handle ‘cybersecurity incident’

Bloom Health Centers discloses data breach involving mental health data of 1,545 patients

On September 11, Psych Associates of Maryland LLC d/b/a Bloom Health Centers (“Bloom Health”), a mental health service provider, announced a data security incident that involved the personal and protected health information of some clinicia… Continue reading Bloom Health Centers discloses data breach involving mental health data of 1,545 patients

Rhysida claims responsibility for attacks on two U.S. health systems

On August 3, Prospect Medical Holdings disclosed a ransomware attack that affected some of its 16 hospitals and 10 clinics, including three hospitals in Connecticut and hospitals run by Crozer Health. Although they have made some progress with recovery… Continue reading Rhysida claims responsibility for attacks on two U.S. health systems

HHS Office for Civil Rights Settles with L.A. Care Health Plan Over Potential HIPAA Security Rule Violations

LA Care, the largest publicly operated health plan in the country paid $1,300,000 to settle Today, the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) announced a settlement of potential violations of the Health Insurance Po… Continue reading HHS Office for Civil Rights Settles with L.A. Care Health Plan Over Potential HIPAA Security Rule Violations