Cyber Security

Respond

…

agree

or disagree

…

100 word min.

This is the most neglected, unsafe and unprofessional type of cybersecurity failure ever that caused for four

million patients' data breach. Because the Advocate group was failed so badly in complying with HIPAA rule, the

Advocate Health Care agreed to pay

5.55 Million Dollars to the Department of Health and Human Services. In 2013,

four laptops were stolen in the Advocate office in Park Ridge, IL. As a result , the attackers accessed the Advocate

Business Associate's network that ended up exposing the conf

idential data of 2000 patients. The same year in

November, another laptop was taken from the unlocked employee's car which caused over 2000 patients' data

breach. After investigation was made by OCR(The Office for Civil Rights), the office indicated that t

he advocate

group failed to implement the proper access controls and not complying with HIPPA rules that states how to handle

e

-

PHI(Electronic protected Health Information) (“Advocate to Pay Largest HIPAA Settlement to Date”, 2016). The

advocate group also

failed to implement physical protection system and did not encrypt the system when the

laptop was taken from the unlocked employee vehicle. The Advocate Health Care admitted how they were

negligent in securing their patients' data and promised to implemen

t all the necessary security controls to protect

further data breach. On the other hand, Director the OCR commented that the covered entities must comply with

HIPAA rule and know risk analysis and risk management to secure patients' e

-

PHI (“Advocate to Pay

Largest HIPAA

Settlement to Date”, 2016).

Advocate to Pay Largest HIPAA Settlement to Date. (2016, August 5). Retrieved from

https://www.beckershospitalreview.com/healthcare

-

information

-

technology/advocate

-

to

-

pay

-

largest

-

hipaa

-

settlement

-

to

-

date.html

Respond …agree or disagree …100 word min.

This is the most neglected, unsafe and unprofessional type of cybersecurity failure ever that caused for four

million patients' data breach. Because the Advocate group was failed so badly in complying with HIPAA rule, the

Advocate Health Care agreed to pay 5.55 Million Dollars to the Department of Health and Human Services. In 2013,

four laptops were stolen in the Advocate office in Park Ridge, IL. As a result , the attackers accessed the Advocate

Business Associate's network that ended up exposing the confidential data of 2000 patients. The same year in

November, another laptop was taken from the unlocked employee's car which caused over 2000 patients' data

breach. After investigation was made by OCR(The Office for Civil Rights), the office indicated that the advocate

group failed to implement the proper access controls and not complying with HIPPA rules that states how to handle

e-PHI(Electronic protected Health Information) (“Advocate to Pay Largest HIPAA Settlement to Date”, 2016). The

advocate group also failed to implement physical protection system and did not encrypt the system when the

laptop was taken from the unlocked employee vehicle. The Advocate Health Care admitted how they were

negligent in securing their patients' data and promised to implement all the necessary security controls to protect

further data breach. On the other hand, Director the OCR commented that the covered entities must comply with

HIPAA rule and know risk analysis and risk management to secure patients' e-PHI (“Advocate to Pay Largest HIPAA

Settlement to Date”, 2016).

Advocate to Pay Largest HIPAA Settlement to Date. (2016, August 5). Retrieved from

https://www.beckershospitalreview.com/healthcare-information-technology/advocate-to-pay-largest-hipaa-

settlement-to-date.html