Health-care billing company Medical Billing Specialists Inc. (MBS Select) has been hit with a potential class action lawsuit over their 2024 breach.

Notifications first went out a year after the attack by Akira ransomware group.

https://databreaches.net/2025/02/26/medical-billing-vendor-sued-over-health-data-leak-gold-mine/

h/t, Bloomberg Law.

Direct link to complaint: https://www.bloomberglaw.com/public/desktop/document/MarianoGuerravMedicalBillingSpecialistsIncDocketNo125cv10453DMass?doc_id=X7V6GF8O0QV9EOAVLKEKKSJCO87

Ah, notification about less notifications. Classic. Also, Google Drive can chat now?

This alert nearly gave me a heart attack.

Sharp-eyed @zackwhittaker caught this one:

UnitedHealth hid its Change Healthcare data breach notice for months:

https://techcrunch.com/2025/01/15/unitedhealth-hid-its-change-healthcare-data-breach-notice-for-months/

Let's make sure Zack's reporting gets indexed.

Anyone else think that the HHS OCR monetary penalty imposed on Solara Medical was too steep? $3M is one of the steepest monetary penalties HHS OCR has imposed.

I'm glad to see enforcement of the timely notification requirement, but so many entities have blown the risk assessment requirement and the 60 day notification regulations so why is Solara being hit with such a stiff penalty?

https://databreaches.net/2025/01/14/hhs-office-for-civil-rights-settles-hipaa-phishing-cybersecurity-investigation-with-solara-medical-supplies-llc-for-3000000/

When you don't know why you are being notified of a breach, Tuesday edition.

Back in March, I reported on a #ransomware attack on New York Plastic Surgical Group/Long Island Plastic Surgical Group. I would later help get one of the threat actors' storage sites taken down.

Fast forward to yesterday, when to our surprise, my husband received a breach notification letter from NYPSG. Neither one of us can recall him ever being a patient of theirs for anything.

[Had I known NYPSG had his data, I would have examined the data tranche more!]

Needless to say, we have questions....

https://databreaches.net/?p=113912

#HIPAA #databreach #incidentresponse #transparency #notification #HITECH

@brett @campuscodi @zackwhittaker

Pro tip: one button is enough

I was just reading a follow-up on the Philippine Health Insurance (PhilHealth) breach by #Medusa in 2023, and I read something that struck me as unusual:

The govt didn't pay the TA's demands but what they did do was set up a portal where citizens could check to determine if Medusa had leaked their personal identification number.

I can't recall any govt or private sector entity ever creating a portal like that before. Can you? I mean, telling people to check HaveIBeenPwnd is one thing, but to create a portal on a .gov domain to check what TAs leaked?

Portal: https://philhealthleak.privacy.gov.ph/

@campuscodi @zackwhittaker @brett @troyhunt

Apple now requires a judge’s order to hand over your push notification data
https://www.malwarebytes.com/blog/news/2023/12/apple-now-requires-a-judges-order-to-hand-over-your-push-notification-data #apple #push #notification #judge #order #privacy #APNs #token #Wyden

while true {
for event in events {
time = currentTime()
if time >= event.startTime && time < event.endTime {
sendNotification(event);
}
}
sleep(60 * 5);
}

I wonder how many people are going to disable notifications from this app completely because of this.

These two notifications have been firing for HOURS, and it’s still going. I expect it to continue firing until the events end tomorrow.

I just swiped out a #notification without reading it :/ There should be a notification history. #android

@MonaApp The latest builds still has issues with #synch’ing notifications between devices. I see a #notification pop up on the iPhone, ignore it completely, even leave the phone on the on the MagSafe charger…. I look at Mona on the #Mac, a notification count shows on the Mac Icon. I open Mona on the Mac, no notification indicator on the Notification bell at all. It’s therefore easy to forget it’s there. Same thing happens in reverse between the Mac and #iOS.

I may have to stop using #Tumblr because it has a #notification that won't go away. Clicking on the blog that the notification is from shows no activity, but the notification remains.

It's possible that deleting my Tumblr blog might clear the notification? But I think I'd rather leave my blog up and just never look at Tumblr again.

The Unexpected Effect of the Introduction of Mandatory Breach Notification Requirements in Québec:

Lawyers at McCarthy Tétrault write:

"Since September 22, 2022, organizations doing business in Québec have to report any confidentiality incidents (i.e., privacy breaches) that cause a risk of serious injury, due to the partial entry into force of An Act to modernize legislative provisions as regards the protection of personal information (formerly known as “Bill 64”)."

Read more at:

https://www.lexology.com/library/detail.aspx?g=52d3c5d0-aade-4e44-84f5-a5d6036b399d