The U.S. Department of Health & Human Services Office for Civil Rights (OCR) has announced a settlement resolving a HIPAA investigation related to a phishing attack at Ambry Genetics.
The breach affected approximately 225,000 individuals, prompting a thorough investigation into the privacy and security practices of the organization.
The resolution addresses identified privacy and security deficiencies to mitigate future risks and enhance protections of sensitive health information.
This settlement underscores the critical importance of robust cybersecurity measures in healthcare organizations to safeguard patient data.