The Office for Civil Rights (OCR) announced on April 10, 2025, that it has settled alleged HIPAA Security Rule violations with Northeast Radiology for $350,000.

The investigation followed a breach report by Northeast Radiology to OCR in March 2020 after unauthorized individuals accessed radiology images stored in PAC servers. Northeast Radiology notified 298,532 patients of

The Office for Civil Rights of the Department of Health and Human Services (OCR) was busy negotiating and settling enforcement actions in November and early December. Since October 31, 2024, the OCR has settled five separate cases of alleged HIPAA violations. The settlements include resolution agreements and civil monetary penalties.

One of the settlements and

On February 17, 2017, the U.S. Department of Justice (DOJ) announced settlements with 51 hospitals related to implantable cardioverter defibrillators (ICD), totaling over $23 million.  Combined with previously announced settlements, the DOJ has now reached agreements with more than 500 hospitals totaling more than $280 million relating to ICDs.   According to the DOJ, most