HHS’ Civil Rights Office Reaches Second-Ever Ransomware Settlement

Paul Hastings – This is the second OCR investigation of a ransomware attack resulting in a financial penalty for non-compliance with the HIPAA Rules and is one of many investigations that identified a failure to comply with the risk analysis provision of the HIPAA Security Rule.