Heritage Valley Health System to Pay $950,000 Fine Over Ransomware Breach

Heritage Valley Health Systems will pay a $950,000 settlement to the US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) over a 2017 ransomware attack. The third such agreement made within the health sector, it concerns potential violations of the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. The OCR found Heritage Valley had failed to adequately protect its systems against such attacks.