HHS Achieves $100,000 Settlement for Ransomware Cyberattack

The Department of Health and Human Services’ Office for Civil Rights reached a $100,000 settlement with Doctors’ Management Services to resolve a ransomware cyberattack, according to a Tuesday news release.

The settlement resolves a breach report about a ransomware attack that affected the electronic protected health information of 206,695 individuals, the HHS said. Doctors’ Management Services’ network server was infected with GandCrab ransomware, which it allegedly didn’t detect until Dec. 24, 2018, even though the initial unauthorized access occurred April 1, 2017, according to HHS.

Doctors’ Management Services will implement a corrective action plan and be monitored by OCR ...