U.S. Department of Health and Human Services (HHS)

A settlement with Manasa Health Centre has been announced by the US Department of Health and Human Services (HHS).

The agreement resolves a complaint OCR received in April 2020 stating that Manasa Health Centre had improperly released a patient's protected health information when it responded to the patient's unfavourable online review.

Potential HIPAA Privacy Rule (Privacy Rule) violations include improper disclosures of patient-protected health information in response to unfavourable online evaluations, according to an OCR investigation.

and failing to follow rules and regulations pertaining to protected health information. Manasa Health Centre agreed to implement a remedial action plan and paid OCR $30,000 in exchange for resolving these possible violations.

Source: https://www.databreaches.net/hhs-ocr-settles-charges-against-manasa-health-center-for-disclosing-phi-in-response-to-a-negative-online-review/

"id": "USD142925623",
"linkid": "us-department-of-health-and-human-services",
"type": "Data Leak",
"date": "06/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"