MedStar, a Washington, D.C.-area hospital chain, became the latest healthcare industry victim of a cyber-attack when hackers breached its systems with a crippling virus. MedStar operates 10 hospitals in the D.C./Baltimore region, employs 30,000 staff, has 6,000 affiliated physicians, and…
Blog Archives
Cyber-Security Alert: D.C. Area Hospital Chain MedStar Targeted By Hackers
Tagged with: breach, cyber crime, cyber security, data breach, data security, ePHI, hacking, privacy, security practices
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, HIPAA, Privacy
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, HIPAA, Privacy
Insurance Company Must Defend Against Data Breach Class Action, 4th Cir. Says
On Monday, the Fourth Circuit held that Travelers must defend Portal Healthcare in a class action claim arising out of an alleged medical records data breach. The class action, filed in New York state court in April 2013, alleges that…
Tagged with: breach, coverage, cybersecurity, data breach, insurance, publication, risk management
Posted in Data Breach, Data Security, Insurance, Litigation
Posted in Data Breach, Data Security, Insurance, Litigation
OCR Announces Two Significant HIPAA Breach Settlements
On consecutive days, the Office of Civil Rights (“OCR”) of the Department of Health and Human Services (“HHS”) recently announced two large HIPAA breach settlements. On March 16, 2016, OCR announced that it entered into a Resolution Agreement with North…
Tagged with: breach, business associate, business associate agreement, corrective action plan, covered entity, encryption, HHS, HIPAA, laptop, OCR, PHI, policies and procedures, resolution agreement, risk analysis, risk assessment, settlement, unencrypted
Posted in Data Breach, Data Security, HIPAA
Posted in Data Breach, Data Security, HIPAA
House Subcommittee Examines the Role of Cyber Insurance
On March 22, the House Homeland Security Committee’s Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies held a hearing on The Role of Cyber Insurance in Risk Management. The witnesses were Matthew McCabe, a Senior Advisory Specialist for cyber insurance…
Tagged with: cyber security, data security, insurance, risk management, security practices
Posted in Data Security, Insurance
Posted in Data Security, Insurance
iWon’t: Apple’s Face-Off with the DOJ
In what is quickly becoming one of the closest-watched cases in the country, Apple is now at loggerheads with the Department of Justice and FBI over its refusal to unlock the iPhone of one of the San Bernardino shooters. The…
Tagged with: cybersecurity, data security, FBI, privacy, safeguards
Posted in Data Security, Litigation, Privacy
Posted in Data Security, Litigation, Privacy
Michaels Crafts Successful Motion to Dismiss in Data Breach Case
Plaintiffs continue to battle for standing in data breach cases, and another federal court recently added to a growing body of decisions helpful to companies who find themselves on the receiving end of a lawsuit after falling victim to hackers. …
Tagged with: breach, cyber security, cybersecurity, data breach, hacking, standing
Posted in Data Breach, Data Security, Litigation, Privacy
Posted in Data Breach, Data Security, Litigation, Privacy
Chris Correa Isn’t Billy Beane and This Isn’t Moneyball
The lights going on and off within the head of former St. Louis Cardinals scouting director Chris Correa were once probably flickering more actively than the lights inside of The Staples Center just before the Los Angeles Lakers take to…
Tagged with: cyber crime, cybersecurity, data security, hacking, sports, trade secrets
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Privacy, Standards
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Privacy, Standards
FTC Loses in LabMD Data Security Case: ALJ Sets High Bar for Consumer Harm
On November 13, 2015, an administrative law judge (“ALJ”) ruled against the Federal Trade Commission (“FTC”) in its high-profile data security case against LabMD. The ALJ ruled that the FTC had failed to show that LabMD’s conduct had caused harm…
Tagged with: breach, cyber security, data breach, ePHI, file sharing, FTC, HHS, OCR, peer-to-peer, risk assessment, safeguards, security practices, unfair act or practice
Posted in Data Breach, Data Security, FTC, HIPAA, Litigation
Posted in Data Breach, Data Security, FTC, HIPAA, Litigation
The Elephant in the Room – Catastrophic Property Damage from a Cyber Attack
Much of what we discuss in this blog relates to the loss of information and the legal and regulatory framework that exists to address individual privacy concerns following a data breach. However, as our colleague Dick Bennett points out in…
Life After Death (of Safe Harbor) – EU Data Protection in the Wake of Schrems
One month after the landmark decision in Schrems vs. Data Protection Commissioner (C-365/14), the European Commission (Commission) has issued guidelines, in the form of a Communication, regarding the transfer of personal data from the EU to the U.S. As we…
