Following an investigation, the HHS Office for Civil Rights imposed a penalty against Providence Medical Institute for violation of the HIPAA Security Rule
Office for Civil Rights should publicly state that United Health Group is responsible for all breach reporting obligations related to the ransomware attack, letter states