While noting that payment-related breaches are not common in the health care sector, BankInfoSecurity reports that in September, a Texas hospital notified federal regulators of a credit card–processing system hack that may have impacted nearly 48,000 individuals. Wiley Rein's Kirk Nahra, CIPP/US, explained that under the Health Insurance Portability and Accountability Act, payment-related security incidents qualify as reportable breaches since some of the exposed identifiers are considered protected health information. A statement from the hospital said, "It is important to note that the hospital's information and clinical systems were not affected, and medical information was not compromised." 
Full Story