Mystic Valley Elder Services Agrees to Settle Class Action Data Breach Lawsuit for $520,000
The Malden, Massachusetts-based Mystic Valley Elder Services has agreed to pay $520,000 to settle a consolidated class action lawsuit stemming…
The HIPAA Journal legal news section contains details of the latest enforcement activities by the Department of Health and Human Services’ Office for Civil Rights, including settlements and civil monetary penalties, and legal actions taken against covered entities by state attorneys general.
You will also find brief details of class action lawsuits and other legal actions filed against covered entities for HIPAA violations, privacy violations, and data breaches, along with other legal news specifically relating to HIPAA or other legal matters of particular relevance to the healthcare industry.
Changes to HIPAA Rules are detailed in the HIPAA Updates category, although this section does include updates to state legislation, in particular any changes to breach notification and cybersecurity laws that are relevant to healthcare organizations.
The owner and operator of a Michigan home health care company has been convicted of five counts of healthcare fraud...
A settlement has been agreed to resolve a class action lawsuit against Ciox Health, which does business as Datavant Group,...
Endue Software has agreed to pay $870,000 to settle a class action lawsuit that was filed in response to a...
American Multispecialty Group, doing business as Esse Health, a Missouri-based independent physician group serving the greater St. Louis area, experienced...
A former employee of Nuance Communications, a business associate of Geisinger Health System that provided IT and conversational AI services,...
Gandara Mental Health Center in Springfield, Massachusetts, has agreed to settle class action litigation stemming from a June 2024 cyberattack...
The Malden, Massachusetts-based Mystic Valley Elder Services has agreed to pay $520,000 to settle a consolidated class action lawsuit stemming…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert following the publication of a proof of concept (PoC)…
Oglethorpe, a Tampa, FL-based network of mental health and addiction recovery treatment facilities, was sued in response to a June...
Alpine Ear, Nose, & Throat, a Fort Collins, Colorado-based healthcare provider with multiple locations in the state of Colorado, has...
A former Maryland hospital pharmacist who is alleged to have engaged in a multi-year cyber spying campaign is facing up...
Two American cybersecurity professionals who signed up as affiliates for a ransomware group have each been sentenced to four years...
A settlement has been agreed to resolve litigation against defendants Southern Illinois Healthcare Enterprises, Southern Illinois Hospital Services, and Southern...
Settlements have received preliminary approval from the courts to resolve class action data breach lawsuits against Dove Healthcare Management Services...
Alabama Ophthalmology Associates, P.C., has settled a class action lawsuit that was filed in response to a January 2025 cyberattack...
Tempus AI, a publicly traded healthcare artificial intelligence company, is facing multiple class action lawsuits over the alleged unauthorized collection...
A class action lawsuit filed against Absolute Dental Group, LLC, and Judge Consulting, Inc., over a 2025 data breach has...
Tangoe, a provider of software solutions for managing telecom, mobile, and cloud expenses, has agreed to a settlement to resolve...
Memorial Heart Institute, doing business as Chattanooga Heart Institute in Tennessee, was sued over a data breach in 2023. A...
Illinois Bone and Joint Institute (IBJI), one of the largest orthopedic group practices in Illinois, has agreed to settle a...
Anne Arundel Dermatology has agreed to pay $2,400,000 to settle a consolidated class action lawsuit stemming from a cybersecurity incident...
Concord Orthopaedics Professional Association, a New Hampshire-based provider of comprehensive orthopedic and rheumatology care, has settled a consolidated class action...
A $1,450,000 settlement has been agreed upon to resolve a class action lawsuit against the New York orthopedic medicine and...
Cardiovascular Consultants in Arizona has settled a class action lawsuit stemming from a 2023 data breach involving the protected health...
Iowa Attorney General Brenna Bird has filed a lawsuit against Change Healthcare, UnitedHealth Group, and Optum over the February 2024...
Eye Physicians of Central Florida has agreed to settle a class action lawsuit stemming from a 2023 data breach that...
A settlement has been reached to resolve class action data breach litigation against Excelsior Orthopaedics and Buffalo Surgery Center. The...
Balance Autism has agreed to settle a class action lawsuit stemming from a security incident that exposed patient information. Altoona,...
In June of last year, we reported that a settlement had been agreed to resolve a class action lawsuit against...
A telehealth company has admitted to improperly accessing patients’ medical records. GuardDog Telehealth purported to require access to patients’ medical...
A consolidated class action lawsuit against Long Island Plastic Surgical Group, P.C has been resolved with a $2,600,000 settlement. Legal action...
The Seattle, Washington-based surgical group, Proliance Surgeons, has agreed to a settlement to resolve class action litigation over a February...
Cornerstone Healthcare Group Management Services, doing business as Cornerstone Specialty Hospitals (Cornerstone), has agreed to settle class action litigation stemming...
General Physician, P.C., a medical group serving patients in Western New York, has agreed to pay $2.5 million to settle...
Asheville Eye Associates, an eye care provider serving patients in Western North Carolina, has agreed to settle class action litigation...
Rebound Orthopedics & Neurosurgery, a Vancouver, WA-based orthopedic and neurosurgery practice, has agreed to pay $2,500,000 to settle a class action...
The New York-based health systems, Catholic Health System & Northwell Health, have agreed to settle class action lawsuits stemming from...
Carespring Health Care Management in Ohio and LifeBridge Health in Maryland have agreed to settle class action lawsuits stemming from...
Class action lawsuits over data breaches at Centrelake Medical Group and Des Moines Orthopaedic Surgeons have been resolved with settlements....
Emergency Medical Services Authority in Oklahoma and Compassion Health Care in North Carolina were sued over cyberattacks and data breaches....
Pinehurst Radiology Associates has agreed to settle a class action lawsuit over a January 2025 data breach, and Tallahassee Memorial...
Settlements have received preliminary approval from the courts to resolve class action lawsuits against Northeast Rehabilitation Hospital Network, American Addiction...
Staten Island University Hospital (SIUH) in New York has agreed to settle a class action lawsuit over a 2024 data...
McLaren Health Care has agreed to pay $14 million to settle class action litigation stemming from two ransomware attacks in...
Two healthcare providers have agreed to settle class action lawsuits over their use of website tracking technologies. Website tracking technologies,...
Capital Health has agreed to pay $4.5 million to settle a class action lawsuit stemming from a 2023 ransomware attack....
Gryphon Healthcare, a Houston, TX-based revenue cycle, coding, compliance, consultancy, and management services vendor, faced multiple class action lawsuits over...
Northwell Health & Northbay Healthcare were sued over the use of tracking tools on their websites, which are alleged to...
Settlements have been agreed to resolve class action lawsuits over healthcare data breaches experienced by Alabama Cardiovascular Group, Carolina Arthritis...
Two U.S. dermatology practices have agreed to settle class action lawsuits stemming from cybersecurity incidents that exposed patient data. The...
The Department of Health and Human Services’ Office for Civil Rights is the main enforcer of HIPAA compliance; however, state...
The mobility equipment provider United Seating and Mobility, doing business as Numotion, has agreed to settle class action litigation stemming...
The healthcare technology company Veradigm Inc. (formerly Allscripts) has agreed to settle a class action lawsuit that was filed in...
Epic Systems, the market-leading electronic medical record system provider, has filed a lawsuit against the health information network Health Gorilla...
PharMerica has agreed to settle a class action lawsuit over a 2023 hacking incident and data breach that affected 5.8...
A settlement has been approved to resolve class action data breach litigation against Consulting Radiologists Ltd., a physician-owned radiology practice...
Falcon Healthcare, doing business as Interim Healthcare of Lubbock, Texas, a home care and home health care service provider, has...
A federal judge has given preliminary approval of a $1 million settlement to resolve a consolidated class action lawsuit against...
Marlton, NJ-based Continuum Health Alliance, a provider of health management and patient services, has agreed to a settlement to resolve...
A patient can sue for a HIPAA violation – and there are an increasing number of class action suits for...
New Liberty Hospital in Missouri, Memorial Blood Centers in Minnesota, and the New York Blood Center have settled class action...
Murfreesboro Medical Clinic & SurgiCenter in Tennessee has agreed to settle class action litigation over a major data breach in...
A settlement has been agreed to resolve class action litigation against VisionPoint Eye Center over an October 2024 data breach...
Oklahoma Spine Hospital has agreed to pay $1,100,000 to settle a class action lawsuit stemming from a July 2024 data...
Dakota Eye Institute, a multi-specialty group of board-certified ophthalmologists and optometrists based in Bismarck, North Dakota, has agreed to pay $1,000,000...
Kansas City, KS-based Sunflower Medical Group has agreed to pay up to $1,200,000 to settle a class action lawsuit stemming...
Settlements have been agreed to resolve class action data breach lawsuits against Hypertension Nephrology Associates, Asheville Arthritis and Osteoporosis Center,...
Concentra Inc. has agreed to settle an alleged violation of the HIPAA Right of Access with the U.S. Department of...
Group Health Cooperative of South Central Wisconsin, a non-profit, member-owned health plan with approximately 70,000 members, has agreed to settle...
Settlements have received preliminary approval to resolve litigation against the mental health telehealth company Cerebral and the diagnostic imaging company...
Settlements have been agreed to resolve class action lawsuits against three healthcare providers – Sutter Health, Lemonaid Health, & Redeemer...
Memorial Hospital and Manor, a small rural hospital in Bainbridge, Georgia, has agreed to settle a class action lawsuit that...
Behavioral Health Resources, a behavioral and mental health services provider serving patients in Thurston County, Olympia, in Washington state, has...
The Oakland, CA-based healthcare giant Kaiser Permanente has agreed to pay up to $47.5 million to settle class action litigation...
Texas Attorney General Ken Paxton has filed a joint stipulation of dismissal without prejudice, seeking to dismiss all claims in...
A California Superior Court judge has given preliminary approval to a settlement to resolve litigation against Community Psychiatry Management, LLC,...
Main Line Fertility Center in Pennsylvania will pay cash payments to individuals whose sensitive data may have been disclosed to...
Rancho Family Medical Group, a primary care medical group serving patients in Southern California, has agreed to pay $315,000 to...
Trinity Health in Michigan and Precision Imaging Centers in Florida have agreed to settle class action lawsuits that alleged negligence...
Goshen Health System and Hancock Health in Indiana have agreed to settle class action lawsuits that alleged patients’ protected health...
Florida’s Watson Clinic has agreed to pay $10,000,000 to settle class action litigation over a January 2024 data breach that...
Omni Family Health, a network of 39 community health centers in Kern, Kings, Tulare, and Fresno counties in California, experienced...
The Iowa-based healthcare company, CarePro Health Services, has agreed to pay $1.3 million to settle class action litigation stemming from...
Discovery Practice Management, a California-based healthcare provider, has agreed to settle a class action lawsuit stemming from a June 2020...
Data breaches have recently been identified by Sun Valley Surgery Center in Nevada and American Associated Pharmacies in Alabama. Sun...
MedQ Inc., an administrative service provider serving the healthcare industry, has agreed to settle class action litigation over a December...
First Choice Dental, a network of 12 dental clinics in Dane and Madison counties in Wisconsin, experienced a ransomware attack...
University of Tennessee Medical Center and Margaret Mary Community Hospital have both agreed to settle class action lawsuits over the...
A settlement has been agreed to resolve a class action lawsuit against the Louisiana health system, Willis-Knighton Medical Center. The...
Pomona Valley Hospital Medical Center in California has agreed to pay $600,000 to resolve all claims in class action litigation...
Neuromusculoskeletal Center of The Cascades, PC, and Cascade Surgicenter LLC in Oregon have agreed to settle class action litigation stemming...
Therapeutic Health Services, a Seattle, WA-based provider of opioid addiction treatment, mental health counseling, and rehabilitation for alcohol and drug addiction recovery,...
A $19,375,000 settlement has been proposed to resolve a consolidated class action lawsuit against the electronic health records and practice...
An $18 million settlement proposed by Yale New Haven Health to resolve claims stemming from a 2025 data breach has been...
Greater Cincinnati Behavioral Health Services (GCBHS) has agreed to pay up to $850,000 to resolve all claims related to a...
Fraser Child and Family Center has agreed to pay $750,000 to settle class action litigation over a 2024 data breach....
City of Hope, a Duarte, California-based non-profit clinical research and cancer treatment center, has agreed to settle a class action...
Akumin, a Florida-based provider of outpatient radiology and oncology services with locations in more than 20 U.S. states, has agreed...
Eastern Radiologists in North Carolina has agreed to pay $3.25 million to settle a class action lawsuit over a 2023...
Orthopedics Rhode Island (Ortho RI) has agreed to pay $2.9 million to settle a class action lawsuit stemming from a...
A $49.99 million settlement has received preliminary approval from the court to resolve class action litigation against Heritage Provider Network,...
ALN Medical Management, a Nebraska-based revenue cycle management company, has agreed to pay $4 million to settle class action litigation...
Skagit County Public Hospital District No. 1, doing business as Skagit Regional Health, the operator of Skagit Regional Hospital in...
Reid Hospital & Health Care Services, Inc., doing business as Reid Health, in Richmond, Indiana, has agreed to a settlement...
EyeMed Vision Care has agreed to pay $5 million to settle a class action lawsuit stemming from a June 2020...
A settlement has been agreed to resolve litigation against Octapharma Plasma over its April 2024 ransomware attack and data breach....
Individuals who used SSM Health’s MyChart patient portal when tracking tools were active are entitled to claim a cash payment...
A class action lawsuit against Hospital Sisters Health System has been settled for $7.6 million. The lawsuit relates to an...
A settlement has been finalized to resolve a litigation against Flo Health, Inc., Google LLC, and Flurry, Inc., over the...
Bayhealth Medical Center in Dover, Delaware, has agreed to settle a proposed class action lawsuit stemming from a 2024 ransomware...
LCMC Health Holdings and Louisiana Children’s Medical Center have agreed to settle a lawsuit that alleged that tracking code added...
OneBlood, a non-profit organization that provides blood to approximately 350 hospitals in the southeastern United States, has agreed to pay...
Medusind has agreed to pay $5,000,000 to settle a consolidated class action lawsuit over a 2023 data breach. Medusind is...
Columbia University Health Care (CUHC) has agreed to pay $600,000 to settle a class action lawsuit over a cybersecurity incident...
Jefferson Healthcare has agreed to settle a class action lawsuit that alleged sensitive data was transmitted to third parties without...
23andMe has proposed an increased settlement fund to resolve U.S. litigation over its 2023 data breach, adding a further $20...
A lawsuit has been filed against Alphabet-owned Verily by a former employee who alleges that the personally identifiable health information...
WebTPA Employer Services (WebTPA) and the co-defendants in a consolidated class action lawsuit have agreed to a $13,750,000 settlement to...
A $675,000 settlement has been agreed upon to resolve a class action data breach lawsuit against R1 RCM Inc., a...
Adena Health System, a nonprofit health system serving patients in south central and southern Ohio, has agreed to pay up...
The Trump administration has agreed to settle a lawsuit filed by the Washington State Medical Association (WSMA) and eight other...
Weirton Medical Center in West Virginia has agreed to a settlement to resolve class action litigation over a January 2024...
CVS Health is facing a probe into potential HIPAA violations related to the alleged use of patient data for lobbying...
Morris Hospital & Healthcare Centers has agreed to settle a consolidated class action lawsuit that alleged negligence for failing to...
A former business clerk at Montefiore Medical Center and his partner have pleaded guilty to stealing thousands of patient records...
Another healthcare provider has agreed to settle a class action lawsuit over its use of Meta Pixel and other third-party...
Mount Sinai Health System, the largest hospital network in New York City, has agreed to a $5.3 million settlement to...
Hot on the heels of the Blacksuit ransomware disruption comes another announcement about major enforcement action against a ransomware group....
A federal judge has ordered the U.S. Department of Health and Human Services (HHS) to stop sharing the data of...
A District Court judge has recently given preliminary approval of an $8.5 million settlement to resolve a consolidated class action...
A Chicago anti-poverty organization and associated companies have agreed to a $300,000 settlement to resolve a class action lawsuit filed...
The Christ Hospital in Cincinnati, Ohio, has agreed to pay up to $7 million to settle a consolidated class action...
Cencora, The Lash Group, and their affiliates have agreed to pay $40 million to settle class action data breach litigation...
Settlements have received preliminary approval from the courts to resolve class action data breach litigation against Family Health Center in...
Valhalla, NY-based Boston Children’s Health Physicians (BCHP) and ATSG Inc. have agreed to pay $5,150,000 to settle a class action...
Dental Group of Amarillo in Texas and Heart South Cardiovascular Group in Alabama have settled class action lawsuits to resolve...
HCA Healthcare Inc. has agreed to settle class action litigation stemming from a July 2023 data breach that was reported...
Settlements have been reached with two healthcare entities to resolve allegations that they used pixels and other tracking tools on...
Bone & Joint Clinic S.C. has agreed to pay $575,000 to settle a class action lawsuit stemming from a January...
A $2 million settlement has received preliminary approval from the court to resolve a class action lawsuit against Southwest Louisiana...
BJC Health System, doing business as BJC HealthCare, is one of the latest healthcare organizations to settle litigation stemming from...
MedStar Health has agreed to settle class action litigation stemming from a 2023 data breach that affected more than 183,000...
Gastroenterology Associates of Central Florida PA, which does business as the Center for Digestive Health, has agreed to settle a...
Specialty Networks LLC, a Cardinal Health company that provides radiology information systems and PPS analytics to urology, gastroenterology, and rheumatology...
Eisenhower Medical Center (now Eisenhower Health), a Rancho Mirage, CA, a nonprofit teaching hospital, has agreed to settle a lawsuit...
A settlement has been approved to resolve class action litigation against Northbay Healthcare Corporation over a 2024 cyberattack and data...
A class action lawsuit against ProSmile Holdings LLC over a 2022 data breach has been resolved, with all parties agreeing...
Woonsocket, RI-based Community Care Alliance has agreed to pay $1,090,000 to resolve a class action lawsuit over a July 2024...
A $14 million settlement has received preliminary approval to end class action data breach litigation against Independent Living Systems (ILS),...
A settlement has been approved to resolve a class action lawsuit against East Carolina Health (EC Health) that stemmed from...
Another settlement has been reached to resolve a class action lawsuit over the use of third-party tracking tools on healthcare...
MarinHealth has agreed to a $3 million settlement to resolve claims related to its use of the Meta Pixel tracking...
Gramercy Surgery Center in New York has agreed to settle a class action lawsuit that was filed in response to...
A coalition of 20 state Attorneys General are suing the Department of Health and Human Services (HHS), Department of Homeland...
A notorious and prolific hacker alleged to have conducted cyberattacks on more than 40 victims in the United States has...
A settlement has been agreed to resolve a class action lawsuit against Physicians to Women, Inc., and Mid-Atlantic Women’s Care...
Arisa Health, an Arkansas behavioral health system, has agreed to pay $1.9 million to settle a class action lawsuit that...
MNGI Digestive Health has agreed to settle a class action lawsuit that alleged negligence for failing to protect the sensitive...
A settlement has been agreed to resolve class action data breach litigation against HealthEC and its clients over a 2023...
A lawsuit against Google LLC in the state of California that alleges the tech giant unlawfully collected individuals’ personal health...
The University of Rochester has agreed to a $2.85 million settlement to resolve all claims related to the use of...
A California company that provides an agentic AI-powered software solution for streamlining healthcare operations and improving operational efficiency has recently...
The New York-based management service organization, Practice Resources LLC, has agreed to pay $1.5 million to resolve a class action...
Planned Parenthood patients are taking legal action over the theft of their sensitive data from Laboratory Services Cooperative (LSC), a...
WellNow Urgent Care (formerly Five Star Urgent Care), a network of walk-in urgent care clinics in New York, Illinois, Michigan,...
Shields Health Care Group has negotiated a $15.35 million settlement to resolve claims stemming from a 2022 data breach that...
Coastal Orthopedics & Sports Medicine of Southwest Florida (COSM) has agreed to settle class action litigation stemming from a June...
Robeson Health Care Corporation, a Pembroke, North Carolina-based integrated health system, has agreed to settle a class action lawsuit that...
Netgain Technology has agreed to settle consumer data breach litigation filed in response to a 2020 ransomware attack and data...
A settlement has received preliminary approval from a judge to resolve a class action complaint against Imagine360 over a 2023...
A $20 million settlement has received preliminary approval from a Federal judge to resolve multidistrict litigation against the software provider...
The City of Oakland in California has agreed to settle litigation stemming from a ransomware attack and data breach that...
A $2.4 million settlement has received final approval from the court to resolve a class action lawsuit against Somnia Inc....
A settlement has been agreed to resolve litigation stemming from a 2022 data breach at AllCare Plus Pharmacy. The Northborough,...
Frederick Health Medical Group is facing several potential class action lawsuits over a recent data breach that affected more than...
Dameron Hospital in California has agreed to pay $650,000 to settle litigation arising from a cyberattack and data breach that...
Navvis & Company and SSM Health Care Corporation have agreed to a $6.5 million settlement to resolve all claims related...
Change Healthcare is facing another class action lawsuit over its February 2024 ransomware attack. The latest lawsuit was filed by...
A HIPAA-covered entity is suing one of its business associates over an alleged failure to comply with the terms of...
The CEO of an Edmond, OK-based cybersecurity firm has been accused of intentionally installing malware at an Oklahoma City hospital....
A class action lawsuit has been filed in the U.S. District Court in Kansas City, Kansas, against the University of...
A settlement has been reached to resolve a class action lawsuit against St. Louis University and SSM Health Saint Louis...
The Vancouver, WA-based drug store chain Hi-School Pharmacy has agreed to settle a class action data breach lawsuit over a...
A settlement has been reached to resolve class action litigation against Fresenius Vascular Care, Inc., which does business as Azura...
A lawsuit against Orlando Health in Florida over the disclosure of the plaintiff’s data to third parties via tracking tools...
On March 17, 2025, Nebraska Governor Jim Pillen signed Legislative Bill 241 into law, which limits class action liability for...
A settlement has been agreed to resolve multiple Infosys McCamish Systems class action lawsuits that were filed in response to...
Columbus Regional Healthcare has agreed to a $1,175,000 settlement to resolve litigation stemming from a May 2023 data breach. The...
A settlement has been agreed to resolve a lawsuit against the Rhode Island Public Transit Authority (RIPTA) and UnitedHealthcare New...
CareFirst BlueCross BlueShield has filed a lawsuit against Change Healthcare in response to the February 2024 ransomware attack that caused...
Apria Healthcare, an Indianapolis-based provider of home healthcare equipment and related services, has agreed to pay $6,400,000 to resolve all...
Rite Aid has agreed to settle a class action lawsuit over a June 2024 data breach that involved the personal...
The Supreme Court has declined to hear a case about whether a Federally Qualified Health Center (FQHC) is immune from...
Harvard Pilgrim Health Care and its parent company Point32Health have agreed to a $16 million settlement to resolve claims related...
The New York-based labor Union, UNITE HERE, has agreed to pay $6 million to resolve a consolidated class action lawsuit...
Fred Hutchinson Cancer Center and the University of Washington have agreed to pay $11,500,000 to settle a proposed class action...
A $2.8 million settlement has been agreed to resolve a class action lawsuit against Arietis Health over a 2023 hacking...
The U.S. Department of Justice has announced that Health Net Federal Services (HNFS) and its parent company, Centene Corporation, have...
Berry, Dunn, McNeil & Parker, LLC (BerryDunn) has agreed to settle a class action lawsuit that alleged negligence for failing...
A $7 million settlement has been agreed to resolve a lawsuit filed against the virtual mental health provider Brightline over...
Southeast Series of Lockton Companies, LLC, a provider of insurance services, has agreed to pay up to $9,900,000 to settle...
The District of Columbia Health Benefit Exchange Authority (HBX) has agreed to settle a class action lawsuit stemming from a...
The California Department of Corrections and Rehabilitation (CDCR) has agreed to settle a class action lawsuit that alleged negligence for...
In Early November 2023, Mulkay Cardiology Consultants in New Jersey announced it had fallen victim to a ransomware attack that...
The digital marketing agency Rise Interactive Media & Analytics has agreed to settle a class action lawsuit filed in response...
Classic Resident Management Limited Partnership, which does business as Chicago-based Vi Living, the operator of 10 continuing care retirement communities...
The Department of Justice (DOJ) has dropped all charges against Dr. Ethan Haim, a former surgeon at Texas Children’s Hospital...
Professional Finance Company, one of the leading debt collection agencies in the United States, has agreed to settle a class...
An Iowa doctor who accessed the medical records of current and former romantic partners without authorization, and shared an unauthorized...
The Farmingdale, NY-based life sciences and diagnostics company Enzo Biochem has agreed to pay $7.5 million to settle a consolidated...
Morrison Community Hospital, a critical access hospital in Illinois, has agreed to a $675,000 settlement to resolve a lawsuit filed...
A class action lawsuit filed against Hapy Bear Surgery Center over a December 2023 ransomware attack has been settled for...
McPherson Hospital, a 25-bed critical access hospital in Kansas, has agreed to a $500,000 settlement to resolve a class action...
Eskenazi Health has agreed to settle litigation stemming from an August 2021 ransomware attack in which the protected health information...
University of Missouri Health Care (MU Health Care) has agreed to pay $8 million to resolve a class action lawsuit...
Tampa General Hospital has agreed to pay $6,800,000 to resolve a class action lawsuit related to a 2023 cyberattack that...
Brightline Inc., a Palo Alto, CA-based provider of behavioral healthcare services for children and their families, has agreed to settle...
A Romanian man has been sentenced to 20 years in prison for conducting ransomware attacks on healthcare providers and educational...
A dual Russian and Israeli national alleged to have been a developer for the infamous LockBit ransomware group has been...
Luxottica, the world’s largest eyewear company, has agreed to settle class action data breach litigation related to a 2020 hacking...
Jefferson Health, a health system serving patients in the Greater Philadelphia area and South New Jersey, is facing a class...
The marketing company and mailing vendor, Kaye-Smith Enterprises, has agreed to settle a class action lawsuit filed in response to...
A New York healthcare provider that experienced a breach of the personal and protected health information of 242,641 New Yorkers...
A hacker who targeted multiple U.S. healthcare organizations, breached their networks, stole sensitive data, and attempted to extort them, has...
An $8.9 million settlement has been agreed to resolve a class action lawsuit over a cyberattack on the radiation therapy...
A Michigan Nurse at the U.S. Department of Veteran Affairs has been charged with unlawfully accessing and obtaining the medical...
Mount Nittany Health in Pennsylvania has agreed to pay $1.8 million to resolve a class action lawsuit that alleged sensitive...
GoodRx, a telemedicine platform provider and drug discounter, has agreed to settle a consolidated class action lawsuit for $25 million....
Ransomware actors operating within Russia are beyond the reach of Western law enforcement agencies and appear to operate without fear...
The online pharmacy Postmeds Inc., which does business as Truepill, has agreed to settle a class action lawsuit filed in...
Settlements proposed by Oak Valley Hospital & Pacific Cataract & Laser Institute to resolve data breach litigation are now awaiting...
The Supreme Court of New York has granted preliminary approval of a $1.5 million settlement to resolve a class action...
Cummins Behavioral Health, a behavioral healthcare provider in Central and Western Indiana, has agreed to a $2.1 million settlement to...
Lawsuits have recently been filed against the professional networking platform LinkedIn, Meta (Facebook), and three healthcare companies over the use...
Texas Attorney General Ken Paxton is actively enforcing Senate Bill 14 (SB 14) which prohibits physicians and other licensed medical...
A Chelan-Douglas Health District data breach lawsuit that was dismissed by the Chelan County Superior Court has been revived by...
A lawsuit has been filed against the Department of Health and Human Services (HHS), HHS Secretary Xavier Becerra, the Office...
Great Expressions Dental Centers has agreed to settle a class action lawsuit stemming from a 2023 data breach involving the...
A $1.85 million settlement to resolve a class action data breach lawsuit against the New York radiology group, East River...
The Supreme Court has declined to hear the Biden Administration’s appeal that sought to overturn the decision of a lower...
An international law enforcement operation has resulted in the arrests of four individuals suspected of involvement in LockBit ransomware attacks...
A class action lawsuit against CorrectCare Integrated Health LLC (CorrectCare) over a 2022 data breach that affected around 600,000 individuals...
A $65 million settlement has been agreed to resolve a class action data breach lawsuit against Lehigh Valley Health Network...
Wisconsin-based St. Croix Regional Medical Center has proposed a $225,000 settlement to resolve a lawsuit filed by individuals who alleged...
An alleged member of the Karakurt threat group has been charged in U.S. District Court in Cincinnati with conspiracy to...
A $2.24 million settlement proposed by Atlantic General Hospital in Berlin, MD, to resolve a class action lawsuit stemming from...
Humana has agreed to settle a lawsuit filed by a whistleblower who accused the health insurer of submitting fraudulent bids...
Several class action lawsuits have been filed against Acadian Ambulance over a recent ransomware attack and data breach that may...
A lawsuit filed against Prospect Medical Holdings over a Summer 2023 Rhysida ransomware attack has survived a motion to dismiss;...
Rite Aid, the fourth largest pharmacy chain in the United States, is facing a class action lawsuit over a June...
The Children and Teens’ Online Privacy Protection Act (COPPA 2.0) and the Kids Online Safety Act (KOSA) have been passed by...
The National Community Pharmacists Association (NCPA) and more than three dozen healthcare providers in 22 U.S. states are suing Change...
The Seattle, WA-based software company, MCG Health, has proposed a $8.8 million settlement to resolve a consolidated class action lawsuit...
Pruitt Health is facing a class action lawsuit over a 2023 ransomware attack that exposed the protected health information of...
A class action lawsuit has been filed against Ann & Robert H. Lurie Children’s Hospital in Chicago in response to...
A $3.45 million settlement has been settlement has been proposed to resolve a consolidated class action lawsuit over a 2021...
The U.S. Department of Health and Human Services (HHS) Office of the National Coordinator for Health Information Technology (ONC) has...
The Houston, TX-based medical device company, LivaNova, is facing multiple class action lawsuits over an October 2023 cyberattack that exposed...
Pennsylvania has updated its data breach notification law, narrowing the definition of personal information, adding the requirement to notify the...
A Seattle, WA, plastic surgery practice has been ordered to pay a financial penalty of $5 million to the Office...
The HHS’ Office for Civil Rights (OCR) has agreed to settle alleged HIPAA Security Rule violations with Heritage Valley Health...
On Thursday, a federal judge in Texas ruled that the guidance issued by the HHS’ Office for Civil Rights on...
A class action lawsuit has been filed against A&A Services, a medication benefits management service provider that operates as Sav-Rx,...
California Attorney General Rob Bonta has announced a settlement with Adventist Health Hanford to resolve alleged violations of the Health...
Superior Air-Ground Ambulance Service is facing a class action lawsuit over a data breach that affected more than 858,000 individuals....
Blackbaud has agreed to pay $6.75 million to settle alleged violations of the Health Insurance Portability and Accountability Act (HIPAA)...
A doctor who provided documents to a reporter confirming Texas Children’s Hospital was providing gender-affirming care to minors after making...
Designed Receivable Solutions, a Cypress, CA-based revenue cycle management company, is facing a class action lawsuit over a data breach...
A lawsuit has been filed against Cencora Inc. and The Lash Group LLC over a recently disclosed data breach. The...
Mercy Health has agreed to a $1.8 million settlement to resolve all claims related to a 2020 HIPAA compliance data...
The prosecution of two doctors accused of criminal HIPAA violations and conspiring with the Russian government has ended in a...
Palm Beach Health Network Physicians Group and Palm Beach Gardens Community Hospital are facing a class action lawsuit over the...
The Federal Trade Commission (FTC) has finalized a settlement with Blackbaud that resolves allegations that the South Carolina firm’s poor...
A federal judge has denied class certification in a consolidated class action lawsuit against Blackbaud over its 2020 ransomware attack...
Gifted Healthcare has proposed a settlement to resolve a class action lawsuit that alleged negligence for failing to implement reasonable...
Presbyterian Healthcare Services has proposed a settlement to resolve a class action lawsuit that was filed by patients whose protected...
BioPlus Specialty Pharmacy Services has proposed a settlement to resolve a class action lawsuit that was filed in response to...
BakerHostetler has released the 10th edition of its Data Security Incident Response Report, which shares data from the incidents the...
A federal court judge has recommended a class action lawsuit against CommonSpririt Health over its 2022 data breach should be...
The Texas health system Ernest Health is being sued by patients who had their protected health information compromised in a...
Last month, the Spring, TX-based revenue cycle management firm MedData agreed to a $7 million settlement to resolve a class...
The Federal Trade Commission (FTC) has ordered the alcohol addiction treatment firm Monument to stop disclosing consumers’ health data to...
The Federal Trade Commission (FTC) has fined the mental health startup Cerebral $7.1 million for consumer privacy violations and deceptive...
The San Francisco, CA-based law firm Orrick, Herrington & Sutcliffe has agreed to a $8 million settlement to resolve a...
Children’s Healthcare of Atlanta is one of the latest healthcare providers to face a class action lawsuit over the use...
Atlanta Women’s Health Group is facing a class action lawsuit over an April 2023 cyberattack that saw an unauthorized third...
A class action lawsuit against Seattle Children’s Hospital (SCH) over its use of pixels and other tracking technologies on its...
Planned Parenthood Los Angeles, a provider of reproductive healthcare services in Los Angeles County, has proposed a $6 million settlement...
A lawsuit against CareFirst BlueCross BlueShield that was filed in response to a 2014 data breach has had a contract...
Lamoille Health Partners, a Vermont health system serving patients in Lamoille County, has agreed to settle a lawsuit that was...
The HHS’ Office for Civil Rights has announced another financial penalty has been imposed for a violation of the HIPAA...
Utah has updated its online data security and privacy laws with new definitions and new requirements for data breach notifications...
The Spring, TX-based revenue cycle management company Med-Data has agreed to a $7 million settlement to resolve all claims stemming...
Roper St. Francis Healthcare has agreed to a $1.5 million settlement to resolve a class action lawsuit that was filed...
A $1.45 million settlement has been agreed by Avem Health Partners to resolve claims related to a 2022 HIPAA data...
Peoria, Illinois-based Petersen Health Care, one of the largest operators of nursing homes in the United States, filed for Chapter...
Lawsuits have started to be filed against UnitedHealth Group, Optum Inc., and Change Healthcare by healthcare providers that have been...
Concentra Health Services is facing a class action lawsuit over a data breach at one of its business associates that...
Knoxville, TN-based Tennessee Orthopaedic Clinics has agreed to settle a class action lawsuit that was filed in response to a...
An affiliate of the notorious LockBit ransomware group has been sentenced in Canada to almost four years in jail and...
Class action lawsuits are stacking up against Medical Management Resource Group LLC (MMRC), which does business as American Vision Partners,...
Change Healthcare experienced a Blackcat ransomware attack on February 21, 2024, and is still recovering from the incident, with many...
Personal Touch Holding Corp. has received preliminary approval for a settlement to resolve a class action lawsuit that was filed...
Indiana Attorney General Todd Rokita has filed a lawsuit against Apria Healthcare alleging violations of the Health Insurance Portability and...
Empress Ambulance Service, an ambulance company that operates in many regions of New York as Empress EMS, has proposed a...
A Ukrainian man accused of leading racketeering groups who conspired to infect thousands of business computers with malware has pleaded...
Connexin Software, which does business as Office Practicum, has proposed a $4 million settlement to resolve a consolidated class action...
Dozens of lawsuits that were filed in response to the mass exploitation of a vulnerability in Fortra’s GoAnywhere MFT file...
The U.S. Department of Health and Human Services (HHS) has finalized the proposed modifications to the Confidentiality of Substance Use...
US Fertility LLC, the operator of more than 100 fertility clinics across the United States, has proposed a $5.75 million...
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has announced its first financial penalty of...
The Federal Trade Commission (FTC) has ordered South Carolina-based Blackbaud to implement a raft of security measures and enforce its...
Healthcare organizations and businesses in Florida could soon be given protection against data breach lawsuits if they implement and maintain...
A Russian national who was involved in a ransomware attack on the Australian health insurance provider Medibank in 2022 has...
A $7.25 million settlement has been proposed to resolve a class action lawsuit – In re: Lincare Holdings Inc. Data...
There was no letup in healthcare data breaches as the year drew to a close, with December seeing the second-highest...
The Pharmaceutical giant Merck has finally obtained a settlement with its insurance policy providers over a June 2017 cyberattack that...
Novant Health has agreed to settle a class action lawsuit that stemmed from its use of tracking pixels on its...
Capital Health Systems in New Jersey has recently announced that it fell victim to a cyberattack in late November that...
ReproSource Fertility Diagnostics has proposed a settlement to resolve litigation stemming from a 2021 ransomware attack that potentially resulted in...
Mark Kevin Robison, a former vice president of Commonwealth Health Corporation (now Med Center Health) in Kentucky has been sentenced...
Michigan Attorney General Dana Nessel has called for legislative changes to hold companies in the state more accountable for data...
Rite Aid has been banned from using facial recognition technology for security surveillance for five years as part of a...
More than half a dozen lawsuits have been filed against the Fred Hutchinson Cancer Center over a cyberattack and data...
New York Presbyterian Hospital has agreed to settle alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy...
The Texas Attorney General sent a civil investigative demand to Seattle Children’s Hospital seeking access to the medical records of...
A settlement has been proposed by the Metropolitan Area EMS Authority to resolve a class action lawsuit that was filed...
Horizon Actuarial Services has proposed a $8.73 million settlement to resolve all claims related to a hacking incident and data...
The ALPHV/BlackCat ransomware group has been disrupted by the Federal Bureau of Investigation, in partnership with Europol and law enforcement...
Is Your Organization HIPAA Compliant?
Find Out With Our Free HIPAA Compliance Checklist
Get Free Checklist