HIPAA Blog

[ Thursday, July 30, 2026 ]

 

OCR Ransomware Settlement #21: OCR recently entered into a settlement agreement with OSF Health System in Illinois and Michigan regarding a ransomware event that affected 54,000 patients.  OCR fined the entity $500,000, and OCR will specially monitor OSF for 2 years to ensure HIPAA compliance.

Guess what the primary HIPAA failure of OSF was?  As usual, the lack of a sufficient security risk analysis is the leading charge, along with the failure to provide timely notice to affected individuals or OCR.  


Jeff [8:17 AM]

Comments: Post a Comment
http://www.blogger.com/template-edit.g?blogID=3380636 Blogger: HIPAA Blog - Edit your Template