Anthem has agreed to pay $39.5 million to settle allegations of inadequate data security related to a 2015 cyberattack that exposed the personal information of nearly 79 million individuals, according to a Sept. 30 Indiana Business Journal report.
Cybersecurity
Over the past two weeks, several cyberattacks on hospitals and health systems have forced computer systems offline.
HHS released important updates on the Ryuk ransomware, which is suspected in the recent cyberattack at King of Prussia, Pa.-based Universal Health Systems hospital.
In September, 67 organizations reported to HHS a collective total of 5,648,001 individuals being affected by data breaches.
University of Missouri Health Care reported an email phishing attack in May that exposed thousands of patients' protected health information.
Nebraska Medicine in Omaha reported "significant progress" in restoring IT systems on Sept. 29, several days after a cyberattack shut them down, according to a report in the Omaha World-Herald.
Ashtabula (Ohio) County Medical Center remains offline six days after the hospital suffered a technical disruption that knocked its computers offline, according to a report in the Star Beacon.
Gillette, Wyo.-based Campbell County Health received a $1 million insurance settlement over a 2019 ransomware attack that disrupted operations, according to a report in the Powell Tribune.
Universal Health Services, a King of Prussia, Pa.-based health system with 26 hospitals and hundreds of other clinical facilities across the U.S. and United Kingdom, was hit by a cyberattack that shut down computers and some phone systems.
Atlanta-based Piedmont Cancer Institute began notifying more than 5,000 patients in September that their personal health information was exposed as the result of a recent email phishing incident.