On May 16, 2023, the U.S. Department of Health and Human Services’ Office for Civil Rights (“OCR”) announced a $350,000 settlement with MedEvolve, Inc., a practice and revenue cycle management and practice analytics software services company, to resolve alleged violations of the Health Insurance Portability and Accountability Act (“HIPAA”) regulations. The settlement concludes OCR’s five-year investigation into the business associate, after a breach notification report claiming a server containing the protected health information (“PHI”) of over 200,000 individuals was openly accessible on the Internet...
Settlement Reached After 200,000 Affected by HIPAA Breach
Dinsmore & Shohl LLP, May 2023
