HIPAA Journal

6 days ago | hipaajournal.com | Steve Alder

Posted By Steve Alder on May 9, 2025 A new report from a leading cyber insurance provider shows a slight decline in claims for ransomware attacks in 2024. Claim amounts for ransomware-related losses were down 7% from the previous year, according to the Coalition 2025 Cyber Claims Report.

6 days ago | hipaajournal.com | Steve Alder

Posted By Steve Alder on May 9, 2025 A settlement has received preliminary approval from a judge to resolve a class action complaint against Imagine360 over a 2023 hacking incident involving its Citrix file-sharing solution. Imagine360 is a Chesterbrook, Pennsylvania-based company that offers health plan administration and telemedicine services. On or around January 30, 2023, suspicious activity was identified within its Citrix file-sharing solution.

6 days ago | hipaajournal.com | Steve Alder

Posted By Steve Alder on May 9, 2025 The National Institute of Standards and Technology (NIST) has issued a draft update to its Privacy Framework to incorporate the latest cybersecurity guidelines and practices. The NIST Privacy Framework: A Tool for Improving Privacy through Enterprise Risk Management is a voluntary tool that provides a set of strategies for organizations to adopt to improve their approach to protecting personal data.

6 days ago | hipaajournal.com | Steve Alder

Posted By Steve Alder on May 9, 2025 Three vulnerabilities have been identified in Pixmeo OsiriX MD, the most widely used DICOM medical image viewing software in the world, including a critical remotely exploitable flaw that could result in credential theft. The most serious vulnerability is due to credentials being transmitted in cleartext by the Osirix MD Web Portal. The lack of encryption for the transmitted credentials means they could be intercepted by a threat actor.

1 week ago | hipaajournal.com | Steve Alder

Posted By Steve Alder on May 8, 2025 Outsourced HIPAA compliance is when a HIPAA-regulated entity engages external consultants to manage part, or all, of the organization’s HIPAA compliance obligations in order to support an existing in-house compliance team, as an alternative to building an in-house team, or in response to a HIPAA security incident. Outsourced HIPAA compliance services can be structured in various ways.