Banner Health Pays $1.25 Million to Resolve Cybersecurity Breach

Arizona-based Banner Health Affiliated Covered Entities paid $1.25 million to settle a Health Insurance Portability and Accountability Act investigation into a 2016 cybersecurity breach that affected 2.81 million customers, according to HHS Thursday.

Banner Health allegedly violated the HIPAA security rule through its lack of analysis to determine risks and vulnerabilities to electronic protected health information, insufficient monitoring of its health information systems’ activity, not implementing an authentication process of its electronic protected health information, and not having security measures in place to protect electronic protected health information from unauthorized access when it was being transmitted electronically, HHS said.

Banner ...