Leg-Reg Update
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Cybersecurity<br />
• Ransomware attacks grow in heath care.<br />
• A ransomware attack is considered a breach by the HHS Office<br />
for Civil Rights (OCR) unless the entity can demonstrate a low<br />
probability that PHI has been compromised.<br />
• 2017: 477 data breaches reported to OCR up slightly from the<br />
450 reported in 2016<br />
• 2017: 5.6 million records implicated down from 27.3 million in<br />
2016.<br />
• Providers made up the vast majority of OCR reports at 80%.<br />
Health plans represented 12%.<br />
NASL Winter Conference<br />
February 7, 2018<br />
Washington, DC