OCR settles its 2nd ransomware investigation, probably not the last

Following an investigation into the breach of the protected health information of 14,000 individuals, the U.S. Health and Human Services and the Office of Civil Rights announced a $40,000 settlement with Green Ridge Behavioral Health, which provides psychiatric evaluations, medication management and psychotherapy.

WHY IT MATTERS

The Maryland-based practice reported in February 2019 that its network server had been infected with ransomware, resulting in the encryption of company files and the electronic health records of all patients, according to an …

breach civil civil rights green health human information investigation management maryland ocr office practice protected health information psychotherapy ransomware rights services settlement