NEW by me:

Worst breach notifications of 2022:
https://www.databreaches.net/worst-breach-notifications-of-2022/

#DataBreach #HIPAA #SecurityRule #Transarency #ransomware #discovery #notification #CoveredEntity #BusinessAssociate #HITECH #Notice

One of the too-frequent and extremely frustrating parts of trying to disclose responsibly is that you either get ignored or suspected of being a scammer by the people you are trying to help.

If you get a call or contact and don't trust it, fine, but then contact someone you DO trust and have them check out the information. It is not okay to just ignore notifications that you are exposing patient data.

And it's a shame that HHS OCR doesn't crack down harder by imposing some monetary penalties or monitoring requirements. More than 20 enforcement actions on access to records but how many on Security Rule violations?

Read how many notification attempts this one covered entity ignored:
https://www.databreaches.net/no-need-to-hack-when-its-leaking-the-heres-how-you-get-a-hipaa-complaint-edition/

Bah.

#HIPAA #IncidentResponse #ResponsibleDisclosure #SecurityRule #DataBreach #DataLeak #PHI

"No need to hack when it's leaking:" the "Here's how you get a HIPAA complaint" edition: https://www.databreaches.net/no-need-to-hack-when-its-leaking-the-heres-how-you-get-a-hipaa-complaint-edition/

#HIPAA #SecurityRule #ResponsibleDisclosure #DataLeak #IncidentResponse #HHSOCR

@SchizoDuckie