The Office for Civil Rights at the Department of Health and Human Services is probing a “hacking/IT incident” at Defense Health Headquarters.
HHS disclosed initial details of the breach on its Office for Civil Rights (OCR) breach portal website, in which it noted that 1,279 individuals have been affected by the incident…
When an incident affects 500 or more individuals, the covered entity involved must notify HHS and the department secretary “without unreasonable delay,” and no more than 60 calendar days from discovery of the breach…