OCR Will Focus on You if You Don’t Focus on Cybersecurity | Akerman LLP – Health Law Rx

The Office for Civil Rights (OCR) in the US Department of Health and Human Services has taken its first actions under HIPAA Rules, related to a ransomware attack against Doctors’ Management Services and a phishing cyber-attack against Lafourche Medical Group. The OCR’s actions follow investigations into the incidents and serve as a warning to healthcare organizations to identify and address cybersecurity vulnerabilities. The OCR is expected to increase its scrutiny of cybersecurity events affecting the healthcare sector.