The U.S. Department of Health and Human Services announced Athens Orthopedic Clinic agreed to pay $1.5 million to settle violations of the Health Insurance Portability and Accountability Act Privacy and Security Rules. A hacker was able to compromise the clinic's systems in 2016 and access patients' electronic health records. Athens Orthopedic said in its breach report to the OCR that 208,557 people were affected by the breach. As part of the settlement, the clinic will be required to adopt a corrective action plan.
Full Story