Topic
Data Breach
3,463 published works
Data Privacy + Cybersecurity Insider
Tidewater Community College hit with phishing scam exposing data of 3,193 employees
Tidewater Community College (Tidewater) has announced that the personal information, including names and Social Security numbers of 3,193 current and former faculty and staff members was compromised in a phishing…
Data Privacy + Cybersecurity Insider
21st Century Oncology faces second class action suit for data breach of 2.2M records
We previously reported that 21st Century Oncology (21st Century) experienced a data breach of up to 2.2 million patient records that compromised the names, Social Security numbers and health and…
Wills, Trusts & Estates Prof Blog
Move Over Wikileaks, Panamanian Law Firm Doc Drop Reveals Shady Underworld
In this day and age, we are becoming used to huge document caches full of scandalous info being released after some clever computer whiz finagled their way into some system…
Data Privacy + Cybersecurity Insider
Class action suit filed against 21st Century Oncology for data breach
We previously reported [view related post] that 21st Century Oncology had suffered a data breach and notified 2.2 million patients that it had been the victim of a hacking that…
HL Chronicle of Data Protection
OCR Highlights Priorities as it Steps Up HIPAA Enforcement
By Marcy Wilder, Madeline Gitomer, Donald DePass
Last week, the Department of Health and Human Services Office for Civil Rights launched the long-awaited Phase 2 HIPAA Audit Program. Earlier this month, the agency posted two resolution agreements…
California Employment Law
Employee HIPAA Breach or Ransomware Attack? You May Be Able to Sue Under the CFAA
HIPAA does not provide a private right of action. So what can employers subject to HIPAA do when they suffer a HIPAA breach or a ransomware attack at the hands…
HIPAA & Health Information Technology
Breach or Ransomware Attack? Can’t Sue Under HIPAA, but Maybe Under CFAA
The following post was contributed by our colleague Lucy Li. HIPAA itself does not provide a private right of action. So when a hacker or rogue employee impermissibly accesses or…
Workplace Privacy, Data Management & Security Report
Tennessee Amends Breach Notification Statute
On March 24, 2016, Tennessee's breach notification statute was amended when Governor Bill Haslam signed into law S.B. 2005. Under the amendment, notification of a data breach must now be provided to…
Data Privacy + Cybersecurity Insider
Feinstein Institute hit with $3.9M fine from OCR for HIPAA violations
Following the investigation of a self-reported data breach involving the loss of an unencrypted laptop containing the protected health information (PHI) of 13,000 individuals, the OCR slammed the New York…
Privacy & Information Security Law Blog
HHS Announces Settlements with Health Care System and Medical Research Institute over Potential HIPAA Violations
In March 2016, the Department of Health and Human Services announced resolution agreements with North Memorial Health Care of Minnesota and The Feinstein Institute for Medical Research over potential violations…