Comstar LLC agrees to corrective action plan and fine to settle HHS OCR charges
ID: fc7a4f61-f7d2-5cd5-8d49-84c1347226ac
STIX ID: report--fc7a4f61-f7d2-5cd5-8d49-84c1347226ac
Feed Name: DataBreaches.Net
Threat Score
HHS OCR announced an enforcement action against Comstar LLC following a March 2022 ransomware incident that encrypted network servers and affected ePHI for about 585,621 individuals across over 70 covered entities; OCR found Comstar failed to conduct a thorough risk analysis and reached a $75,000 settlement with a two-year corrective action plan requiring comprehensive risk assessment, risk management, policy updates, and workforce training.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.