HHS logo

5 min read

How to notify the HHS of a data breach

Under HIPAA’s Breach Notification Rule, the US Department of Health and Human Services (HHS) must be notified of all breaches of unsecured protected health information (PHI), regardless of size. However, “A covered entity’s breach notification...

Read More
Image of a gavel and of money.

2 min read

HHS reaches $175,000 HIPAA Settlement with BST & Co. CPAs, LLP

The U.S. Department of Health and Human Services has reached a $175,000 settlement with New York accounting firm BST & Co. CPAs after a ransomware...

Read More
blue digital security shield

4 min read

A targeted approach to cybersecurity compliance for HIPAA

Cybersecurity as we know it began in the 1970s with the Advanced Research Projects Agency Network (ARPANET). Furthermore, the 1980s brought the first...

Read More
Image of ChatGPT open on a smart phone.

1 min read

Hackers exploit ChatGPT flaw to steal data

Security researchers have uncovered a vulnerability in ChatGPT that allows hackers to trick the AI into leaking sensitive personal data, without any...

Read More
Is AWS HealthScribe HIPAA compliant? (2025 update)

1 min read

Is AWS HealthScribe HIPAA compliant? (2025 update)

Based on our research, AWS HealthScribe is HIPAA compliant because it meets the requirements set by the U.S. Department of Health and Human Services...

Read More
government building exterior

6 min read

Internal email governance policies that support HIPAA compliance

According to the study "We Got Mail": Electronic Communication Between Physicians and Patients, an estimated 17.5 million adults in the US were...

Read More
Is BastionGPT HIPAA compliant? (2025 update)

1 min read

Is BastionGPT HIPAA compliant? (2025 update)

Based on our research, BastionGPT is HIPAA compliant because it meets the requirements set by the U.S. Department of Health and Human Services (HHS)...

Read More
Image of a lock emoticon placed over a city.

2 min read

Microsoft 365 admin center outage disrupts global access for IT administrators

Microsoft is investigating a widespread outage that has left IT administrators unable to access the Microsoft 365 Admin Center, disrupting core...

Read More
red digital circle

1 min read

Montana Mental Health Center faces a data breach impacting over 87,000

A cyberattack on the Western Montana Mental Health Center has exposed the sensitive personal and health information of nearly 87,000 individuals. The...

Read More
smartphone in hand

5 min read

How should healthcare organizations communicate with patients after a breach?

“In the first six months of the year, 343 data breaches have been reported to the U.S. Department of Health & Human Services. Organizations are...

Read More
Is Lovable.dev HIPAA compliant? (2025 update)

1 min read

Is Lovable.dev HIPAA compliant? (2025 update)

Based on our research, Lovable.dev is not HIPAA compliant because it does not meet the requirements set by the U.S. Department of Health and Human...

Read More
Is Replit.com HIPAA compliant? (2025 update)

1 min read

Is Replit.com HIPAA compliant? (2025 update)

Based on our research, Replit.com is not HIPAA compliant because it does not meet the requirements set by the U.S. Department of Health and Human...

Read More
render logo

2 min read

Is Render.com HIPAA compliant (2025 update)

Based on our research, Render.com is HIPAA compliant because it meets the requirements set by the U.S. Department of Health and Human Services (HHS)...

Read More