OCR Settles $552K Ransomware Case with OSF Healthcare: Risk Analysis Failure Again at the Center
OCR's $552K OSF Healthcare settlement flags the same Security Rule gaps small practices keep getting cited for: risk analysis and breach notification.
HIPAA Security Rule Overhaul Pushed to 2027: What a Small Practice Should Do Right Now
HHS pushed the big HIPAA Security Rule update to July 2027. What the delay means for a small practice, and why you should not stand down.
Four Ransomware Settlements, One Repeated Finding: No Thorough Risk Analysis
OCR settled four ransomware cases for $1,165,000. All four shared one finding: no thorough risk analysis. What small practices should check.
What the New HHS MFA Guidance Means for 1–10 Person Clinics
HHS OCR is signaling multi-factor login expectations for small-practice EHR and email. Here is what small clinics should check today, in plain English.