VPN Solutions Settles Ransomware Investigation for $90,000

The Department of Health and Human Services’ Office for Civil Rights settled a potential violation under the Health Insurance Portability and Accountability Act of 1996 Security Rule with Virtual Private Network Solutions, a Virginia business associate that provides data hosting and cloud services to health plans, health-care clearinghouses, and health-care providers, the agency announced Tuesday.

According to HHS, in December 2021, OCR received a breach report concerning a ransomware incident that impacted portions of the VPN Solutions server infrastructure. VPN Solutions reported that it became aware of the attack on Oct. 31, 2021. The initial report indicated that the data ...