Colorado Children’s Hospital Fined $548,000 for HIPAA Violations

Children’s Hospital Colorado was fined $548,265 for violations of the Health Insurance Portability and Accountability Act, the Health and Human Services Department announced Thursday.

According to HHS, the department investigated the hospital following breaches which reported a phishing attack that compromised an email account containing 3,370 individuals’ protected health information and another after three email accounts were breached, containing 10,840 individuals’ PHI.

The department said the investigation determined that the first reported breach occurred because multi-factor authentication was disabled on an email account. The second breaches occurred, in part, when workforce members gave permission to unknown third parties to ...