The HIPAA Summit Has Partnered with The HIPAA Journal to Offer Free Early Access to the 2025 Annual HIPAA Survey Results & Complimentary Subscription for the HIPAA Journal Newsletter

WASHINGTON DC USA -- HEALTHCARE UPDATE NEWS SERVICE™ -- MAY 6, 2025: The HIPAA Summit is pleased to announce that The HIPAA Journal has become a HIPAA Summit media partner.

The HIPAA Journal provides the most comprehensive coverage of Health Insurance Portability and Accountability Act (HIPAA) news anywhere online, in addition to independent advice about HIPAA compliance and the best practices to adopt to avoid data breaches, HIPAA violations and regulatory fines. The HIPAA Journal has been online for over 10 years and has provided the healthcare compliance community with over 5,000 articles.

The editorial team at The HIPAA Journal has worked hard to provide the best possible resource on all matters relating to HIPAA and be the first location healthcare professionals look to obtain the information they need to protect the privacy of patients and avoid causing HIPAA violations.

Our reference and information articles are regularly reviewed for accuracy and are immediately updated with the latest regulatory changes.

The HIPAA Journal team is committed to reporting healthcare and HIPAA news when the stories break, ensuring our visitors obtain the latest information on regulatory changes, data breaches and other HIPAA matters.

See a sample issues of The HIPAA Journal below.



HIPAA JOURNAL SAMPLE ISSUE



New York Neurology Practice Pays $25,000 to Resolve Alleged Risk Analysis Violation
Comprehensive Neurology has agreed to settle a data breach investigation with the HHS' Office for Civil Rights and will pay a $25,000 financial penalty to resolve an alleged violation of the risk analysis implementation specification of the HIPAA Security Rule.

World Password Day 2025 — Password Tips and Best Practices
May 1, 2025, was World Password Day — A day dedicated to improving awareness of password risks and promoting the adoption of password management best practices.

Healthcare Orgs Fined for Employing Nurses on the HHS-OIG Exclusion List
Two healthcare organizations have entered into settlement agreements with HHS-OIG after being found to have employed nurses on the HHS-OIG exclusion list, who provided items or services that were billed to federally funded healthcare programs.

Somnia's $2.4 Million Data Breach Settlement Receives Final Approval
A $2.4 million settlement has been approved to resolve a class action data breach lawsuit against Somnia, a company that manages anesthesiology services at more than a hundred surgery centers across the country.

AllCare Plus Pharmacy Settles Class Action Data Breach Lawsuit
AllCare Plus Pharmacy in Massachusetts has agreed to settle a class action lawsuit that was filed in response to a June 2022 phishing attack. The settlement will cover claims for up to $5,750, and will provide compensation for lost time and credit monitoring services.

Verisource Services Increases Data Breach Victim Count to 4 Million
Verisource Services, an employee benefits administration service provider, has determined that a previously announced data breach was far worse than initially thought and has affected up to 4 million individuals.

Ascension Notifying Patients About Data Breach at Former Business Partner
Ascension has confirmed that a hacking incident at a former business partner has likely resulted in the theft of patient data, and a database belonging to Carolina Anesthesiology has been exposed online. The breach is one of several recent incidents affecting Ascension patients.

Ransomware Attack on Frederick Health Medical Group Affects 934,000 Patients
A January 2025 ransomware attack on Frederick Health Medical Group resulted in the theft of more than 934,000 patients' data. Several lawsuits have already been filed over the data breach.

Endue Software Confirms Data Breach Affecting Multiple Providers
Cybersecurity incidents have been announced by Endue Software, Whitman County Public Hospital District No. 3, Palo Verde Hospital, and Northern California Children's Therapy Center.

Orthopaedic Specialists of Connecticut & DATS in Pennsylvania Announce 22K-Record Data Breaches
Data breaches have recently been confirmed by Orthopaedic Specialists of Connecticut, Drug and Alcohol Treatment Services, Inc. in Pennsylvania, and Brainard Surgery Center in Ohio. The Texas Health and Human Services Commission has recently announced a previously disclosed data breach has affected an additional 33,500 individuals.

City of Long Beach Notifies Individuals Affected by November 2023 Cyberattack
It has taken 17 months for notification letters to be mailed to the individuals affected by a November 2023 cyberattack on the City of Long Beach in California. 470,060 individuals were affected, and the protected health information of 258,191 individuals was exposed or stolen.

Alternate Solutions Health Network Notifies Patients About May 2024 Email Breach
Email accounts have been compromised at four HIPAA-regulated organizations: Alternate Solutions Health Network in Ohio, Park Royal Hospital in Florida, 90 Degree Benefits in Minnesota, and the Charleston Fire Department in West Virginia. Almost 107,000 individuals have been affected.

FOR E-MAIL ADDRESS CHANGE, ADD OR DELETE REQUESTS:

For changes or additions, please email your request to: listmgr@HITHIPAAUpdateNewsService.com.

For automatic removal of your e-mail address, please click the "SafeUnsubscribe" link located in the footer of this message below.