The Colorado Department of Health Care Policy and Financing (“HCPF”) oversees Health First Colorado (Colorado’s Medicaid program), Child Health Plan Plus (CHP+), and other health care programs for Coloradans who qualify. A vendor of HCPF, IBM, utilized the MOVEit file...
An undisclosed number of college and university students have been affected by a data breach involving UnitedHealthcare Student Resources (“Student Resources”) and Progress Software. Student Resources utilized MOVEit, a file transfer software produced by Progress...
Between February 26, 2023 – March 7, 2023, an unauthorized third party accessed MCNA’s systems removing personal information of 8,923,662 current or former providers of dental/orthodontic care to members of certain state Medicaid and Children’s Health Insurance...
On April 17, 2023, Point32Health, the parent organization of Harvard Pilgrim Health Care and Tufts Health Plan, identified a cybersecurity ransomware incident that impacted their Harvard Pilgrim Health Care systems. Harvard Pilgrim Health Care has more than one...
Court Preliminarily Approves Midwestern Pet Foods Contamination Settlement On August 21, 2023, Judge Matthew P. Brookman of the U.S. District Court for the Southern District of Indiana granted final approval to a $6,375,000 settlement negotiated by Goldenberg...
Apria Healthcare is “one of the nation’s largest providers of home healthcare products and services” including sleep services, COPD care, wound care, respiratory medicines and diabetic equipment. On May 22, 2023, Apria Healthcare began issuing letters to 1,869,598...
One Brooklyn Health is the co-operator of Brookdale University Hospital Medical Center, Interfaith Medical Center and Kingsbrook Jewish Medical Center. From July 9, 2022, through November 19, 2022, One Brooklyn Health’s computer systems were accessed by an...
In December 2022, the HHS Health Sector Cybersecurity Coordination Center issued an analyst note about BlackCat, a ransomware variant, urging healthcare organizations to remain vigilant. Despite the warning, in February 2023, Lehigh Valley Health Network (LVHN)...
Patients who utilized the scheduling website of UCSD Health’s Express Care and Urgent Care between September 13 and December 22, 2023, had their “PHI” and “PII” shared unknowingly and without authorization. The scheduling websites (administered by a third-party...