HHS OCR settles charges that Inmediata Health Group exposed 1.6 million patients’ PHI online
ID: 553e7851-650c-5686-b445-37fa766966b8
STIX ID: report--553e7851-650c-5686-b445-37fa766966b8
Feed Name: DataBreaches.Net
Threat Score
HHS OCR announced a $250,000 settlement with Inmediata Health Group after finding that PHI for 1,565,338 individuals was publicly accessible online and indexed by search engines from 2016–2019 due to HIPAA Security Rule failures; exposed data included names, DOB, addresses, SSNs, and medical/claims details. The notice references prior multi-state and class action settlements, notes that corrective actions are covered by those agreements, and provides recommended security practices for HIPAA-covered entities.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.