$225,000 OCR Settlement Shows Why HIPAA Risk Analysis Can't Be Ignored

$225,000 OCR Settlement Shows Why HIPAA Risk Analysis Can't Be Ignored

The Department of Health and Human Services Office for Civil Rights (OCR) just sent another clear message to healthcare organizations: failing to conduct proper HIPAA risk analysis will cost you—literally. The recent settlement with Deer Oaks – The Behavioral Health Solution demonstrates how a single oversight can cascade into multiple breaches, affecting thousands of patients and resulting in significant financial penalties. The Deer Oaks Case:…

HHS’ Office for Civil Rights Settles HIPAA Privacy and Security Rule Investigation with Deer Oaks Behavioral Health for $225k and a Corrective Action Plan

In October 2023, Deer Oaks Behavioral Health in Texas disclosed a ransomware attack that affected 171,871 patients, which they discovered on September 1, 2023. LockBit3.0 claimed responsibility at the time and leaked dat…