The U.S. Department of Health and Human Services (HHS) has reached a $250,000 settlement with Syracuse ASC LLC, doing business as Specialty Surgery Center of Central New York, over a ransomware breach that compromised the protected health information (PHI) of nearly 25,000 individuals. Announced July 23 by HHS’s Office for Civil Rights (OCR), the settlement addresses potential violations of the HIPAA Security and Breach Notification Rules. It also includes a two-year corrective action plan … [Read more...]