Skip to content
Submit incident
DII-2025-00015
ReportedReported by fewer than three independent publishers, with no official finding.

HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation for $10,000

Today the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a settlement with Northeast Surgical Group, P.C. (NESG), a provider of surgical services in Michigan, for a...

15 January 2025 · Ransomware and extortion
15 January 2025
DII-2025-000156 sources ↓
Quick facts
Category
Ransomware and extortion
Source
DataBreaches.net
Date
15 January 2025
Drafted by
Raidu Incident Detection

What happened

Not publicly disclosed.

Classification

Category
Ransomware and extortion
Industry
Healthcare

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

DataBreaches.net
HHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation for $10,000
15 January 2025
hhs.gov
Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule
hhs.gov
HIPAA Privacy, Security, and Breach Notification Rules
hhs.gov
https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/northeast-surgical-group-ra-cap/index.html
ocrportal.hhs.gov
https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
hhs.gov
https://www.hhs.gov/ocr/complaints/index.html