logo

HHS OCR Settles Ransomware Investigation of OSF Healthcare System and Affiliated Covered Entities

ID: a285f5cd-f6b1-55b8-8ec9-b7cceda96c77

STIX ID: report--a285f5cd-f6b1-55b8-8ec9-b7cceda96c77

Feed Name: DataBreaches.Net

Threat Score
72/100

Date Published: 2026-07-30

Date Updated: 2026-07-30

Author: Dissent

...
...

OSF Healthcare experienced a Nephilim ransomware attack in April 2021 that resulted in the exfiltration of PHI for 53,907 individuals; HHS OCR found failures in OSF's risk analysis and breach notification procedures and resolved the investigation with a $552,250 fine and a two‑year corrective action plan to remediate HIPAA compliance gaps.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.