Microsoft Warns of COVID-19 Phishing Attack via Excel

Microsoft is warning users about an infected Excel email attachment that can wreak major havoc when opened. The massive phishing attack started on May 12 appearing as emails from the Johns Hopkins Center with an Excel attachment that claims to be US deaths caused by the Coronavirus.
OCR Warns There is an Individual Posing as OCR Investigator

On April 3, the Office for Civil Rights (OCR) issued an alert that an individual posing as an OCR Investigator has contacted HIPAA covered entities in an attempt to obtain protected health information (PHI).
Cyberthreats are lurking in COVID-19 pandemic

“As more of our employees work from home and are under the collective stress of the COVID-19 pandemic we become easy victims,” said David Ginsberg, PrivaPlan president. “Security reminders and awareness at this time are essential.”
Best HIPAA Practices Working From Home During the COVID-19 Emergency

During the Coronavirus emergency, physicians and healthcare providers may want to adopt telemedicine as a way to provide patient care. This is an acceptable practice under HIPAA and California data and privacy laws but some precautions should be followed.
Can I share a coronavirus patient’s information to protect the public?

This month in light of the Novel Coronavirus (2019-nCoV) outbreak, the Department of Health and Human Services (HHS) released a bulletin reminding HIPAA covered entities and their business associates of the ways they may share patient information during an outbreak of infectious disease or other emergency situations.
Important notice regarding individuals’ right of access to health records

The Department of Health and Human Services’ Office for Civil Rights has released an announcement that certain legislative changes regarding individuals’ right of access to health records have been reversed.
Windows 7 support ends January 14, 2020

On January 14, 2020, Microsoft stopped free support for Windows 7 just as promised.
Do you understand what PHI is?

An apparent lack of understanding of what defines Protected Health Information (PHI) has cost one hospital system $2.175 million in fines to the Office for Civil Rights (OCR) at the U.S Department of Health and Human Services (HHS).
Unencrypted mobile devices lead to $3 million HIPAA settlement

One lost flash drive and one stolen laptop are costing one hospital system $3 million because both mobile devices were not encrypted.
HHS releases proposal to overhaul patient privacy rules for addiction treatment

The Department of Health and Human Services (HHS) announced proposed changes late last week to the federal regulations governing the confidentiality of patient records created by federally-assisted substance use disorder treatment programs, known as 42 CFR Part 2. Drafted in 1975, 42 CFR Part 2 was designed to protect patient records created by federally-assisted programs […]