Security Incident at EHR Vendor Affects Patients of New York Counselling Practices

Hispanic Counseling Center and Brooklyn Counseling Services in New York have notified patients that some of their personal and health information was compromised in a data security incident at their electronic medical record vendor.

Hispanic Counseling Center

Long Island, New York-based Hispanic Counseling Center operates a mental health clinic and a substance use disorder clinic and provides bilingual counselling services. According to recently mailed notification letters, its electronic medical record vendor, Accumedic Computer Systems, informed Hispanic Counseling Center that it detected suspicious activity within its network on June 8, 2026.

Third-party cybersecurity experts were engaged to investigate the activity, and on August 7, 2026, the EHR vendor concluded that an unauthorized third party first accessed the Accumedic Computer Systems network on April 8, 2026, and potentially obtained customer information between June 4, 2026, and June 8, 2026. The impacted data was reviewed, and on September 1, 2026, Accumedic Computer Systems confirmed that patient health information had been exposed and was potentially obtained. The types of data involved included names, dates of birth, Social Security numbers, medical information, and health insurance information.

The EHR vendor has confirmed that additional technical safeguards have been implemented to prevent similar incidents in the future. Hispanic Counseling Center started notifying the affected individuals on October 30, 2026. The notification letters state that complimentary credit monitoring services are available to the affected individuals. The number of affected individuals has not been publicly disclosed as of the date of this article.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please enable JavaScript in your browser to complete this form.

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

@media only screen and (min-width: 961px) { .inpage_mobile { display: none; } .inpage_banner_12838 { margin-bottom: 18px; } .inpage_banner_12838 a { max-width: 80%; display: block; margin: 0 auto; } } @media only screen and (max-width: 960px) { .inpage_desktop { display: none; } } .hj_co_m_12838 { margin-bottom: 30px; } .hj_co_m_12838 .sbwf-main-form-container { max-width: 340px; margin: 0 auto; box-shadow: 0 4px 6px rgba(0,0,0,0.05),0 6px 6px rgba(0,0,0,0.05); padding: 30px; box-sizing: border-box; border: 1px solid #f4f4f4; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 200px; margin: 0 auto; display: block; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { text-align: center; border-top: 1px dashed #c8c8c8; padding: 20px 0 0; margin: 30px 0 20px; color: #753043; font-weight: 600; line-height: 30px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { text-align: center; font-size: 16px; color: #3B3B3B; line-height: 24px; font-weight: 600; margin: 0; padding: 0; } #sidebar .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 span { font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container p.terms, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms { text-align: center; font-size: 11px; padding-bottom: 0; line-height: 19px; margin: 10px 0 10px; } .hj_co_m_12838 .sbwf-main-form-container p.terms a { color: #753044; text-decoration: none; } .hj_co_m_12838 .sbwf-main-form-container p.terms a:hover { text-decoration: underline; } .hj_co_m_12838 .sbwf-main-form-container p.terms_title, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms_title { text-align: center; font-size: 11px; font-weight: 600; color: #752f43; padding-bottom: 0; line-height: 19px; } .hj_co_m_12838 .sbwf-main-form-container p.info, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.info { text-align: center; color: #727272; font-size: 14px; line-height: 20px; padding-bottom: 20px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input.wpforms-field-medium { width: 100%; max-width: 100%; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form .wpforms-field { padding-top: 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="text"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="email"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="tel"] { border: 2px solid #f4f3f3; font-size: 14px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full { margin: 24px 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 260px; height: 61px; font-size: 16px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_co_m_12838 .sbwf-main-form-container { padding: 20px; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 170px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { font-size: 22px; line-height: 28px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { font-size: 18px; line-height: 24px; } .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="text"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="email"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="tel"] { height: 36px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 220px; height: 52px; font-size: 15px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_sb_m_12838 div.wpforms-container-full .wpforms-form .wpforms-field-row.wpforms-field-medium { max-width: 100%; } form[data-zi-mapped-form] #wpforms-28160-field_1, form[data-zi-mapped-form] #wpforms-28160-field_1-last, form[data-zi-mapped-form] #wpforms-28160-field_3-container, form[data-zi-mapped-form] #wpforms-28160-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28160-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_6-container[data-zi-field-enriched="false"] { display: block !important; } form[data-zi-mapped-form] #wpforms-28155-field_1, form[data-zi-mapped-form] #wpforms-28155-field_1-last, form[data-zi-mapped-form] #wpforms-28155-field_3-container, form[data-zi-mapped-form] #wpforms-28155-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28155-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_6-container[data-zi-field-enriched="false"] { display: block !important; }

Brooklyn Counseling Services

Brooklyn Counseling Services, a Brooklyn, New York-based provider of psychological and emotional care and support, has also notified certain patients about a recent security incident that exposed some of their personal data. The company, which operates formally as BCS Group and is also known as BCS Counselling Group, said the incident affected one of its electronic medical records vendors.

State Attorneys general have been notified about the incident; however, the total number of affected individuals has yet to be publicly disclosed. The incident affected one Massachusetts resident and two Vermont residents; however, the vast majority of individuals are likely to reside in Brooklyn, and the New York Attorney General does not publicly disclose the number of individuals affected by data breaches.

The individual notification letters state the types of information involved for each individual, which include names, email addresses, phone numbers, dates of birth, Social Security Numbers, and health records. The breach notification letter seen by The HIPAA Journal does not state when the incident occurred and does not name the vendor; however, the timing of the letters suggests the incident involved the same vendor, Accumedic Computer Systems, which offers EHR software specifically for behavioral health services providers.

The post Security Incident at EHR Vendor Affects Patients of New York Counselling Practices appeared first on The HIPAA Journal.

Judge Approves $3.9M ArCare Data Breach Settlement

A settlement that resolves claims related to a 2022 security incident and data breach at ArCare has been granted preliminary approval by a District Court Judge. ArCare is a non-profit, federally qualified community health center that provides primary care, behavioral health services, pharmacies, and community outreach programs across Arkansas, Kentucky, and Mississippi.

The Augusta, Arkansas-based healthcare provider first identified unauthorized access to its computer network on February 24, 2022, which caused temporary disruption to services. The forensic investigation determined that an unauthorized third party had access to its network between January 18 and February 24, 2022, and potentially accessed the personal and protected health information of approximately 345,000 individuals. Data compromised in the incident included names, dates of birth, Social Security numbers, driver’s license numbers, financial account information, medical information, and health insurance information.

Multiple class action lawsuits were filed in response to the data breach, which were consolidated into a single complaint – Hale, et al. v. Arcare, Inc. – which is pending in the United States District Court for the Eastern District of Arkansas. The plaintiffs allege that ArCare was at fault and the data breach should have been prevented, and the lawsuit asserts claims for negligence, breach of implied contract, unjust enrichment, breach of fiduciary duty, declaratory judgment, and injunction relief. ArCare maintains that there was no wrongdoing, disagrees with the claims in the lawsuit, and filed a motion to dismiss; however, the motion was denied by the court.

All parties agreed to attend mediation, and the material terms of a settlement were agreed. The settlement has now been finalized. Under the terms of the settlement, ArCare has agreed to establish a $3,900,000 settlement fund to pay benefits to the class members after attorneys’ fees and expenses, settlement administration, costs, and service awards for the plaintiffs have been deducted.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please enable JavaScript in your browser to complete this form.

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

@media only screen and (min-width: 961px) { .inpage_mobile { display: none; } .inpage_banner_12838 { margin-bottom: 18px; } .inpage_banner_12838 a { max-width: 80%; display: block; margin: 0 auto; } } @media only screen and (max-width: 960px) { .inpage_desktop { display: none; } } .hj_co_m_12838 { margin-bottom: 30px; } .hj_co_m_12838 .sbwf-main-form-container { max-width: 340px; margin: 0 auto; box-shadow: 0 4px 6px rgba(0,0,0,0.05),0 6px 6px rgba(0,0,0,0.05); padding: 30px; box-sizing: border-box; border: 1px solid #f4f4f4; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 200px; margin: 0 auto; display: block; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { text-align: center; border-top: 1px dashed #c8c8c8; padding: 20px 0 0; margin: 30px 0 20px; color: #753043; font-weight: 600; line-height: 30px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { text-align: center; font-size: 16px; color: #3B3B3B; line-height: 24px; font-weight: 600; margin: 0; padding: 0; } #sidebar .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 span { font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container p.terms, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms { text-align: center; font-size: 11px; padding-bottom: 0; line-height: 19px; margin: 10px 0 10px; } .hj_co_m_12838 .sbwf-main-form-container p.terms a { color: #753044; text-decoration: none; } .hj_co_m_12838 .sbwf-main-form-container p.terms a:hover { text-decoration: underline; } .hj_co_m_12838 .sbwf-main-form-container p.terms_title, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms_title { text-align: center; font-size: 11px; font-weight: 600; color: #752f43; padding-bottom: 0; line-height: 19px; } .hj_co_m_12838 .sbwf-main-form-container p.info, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.info { text-align: center; color: #727272; font-size: 14px; line-height: 20px; padding-bottom: 20px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input.wpforms-field-medium { width: 100%; max-width: 100%; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form .wpforms-field { padding-top: 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="text"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="email"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="tel"] { border: 2px solid #f4f3f3; font-size: 14px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full { margin: 24px 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 260px; height: 61px; font-size: 16px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_co_m_12838 .sbwf-main-form-container { padding: 20px; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 170px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { font-size: 22px; line-height: 28px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { font-size: 18px; line-height: 24px; } .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="text"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="email"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="tel"] { height: 36px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 220px; height: 52px; font-size: 15px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_sb_m_12838 div.wpforms-container-full .wpforms-form .wpforms-field-row.wpforms-field-medium { max-width: 100%; } form[data-zi-mapped-form] #wpforms-28160-field_1, form[data-zi-mapped-form] #wpforms-28160-field_1-last, form[data-zi-mapped-form] #wpforms-28160-field_3-container, form[data-zi-mapped-form] #wpforms-28160-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28160-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_6-container[data-zi-field-enriched="false"] { display: block !important; } form[data-zi-mapped-form] #wpforms-28155-field_1, form[data-zi-mapped-form] #wpforms-28155-field_1-last, form[data-zi-mapped-form] #wpforms-28155-field_3-container, form[data-zi-mapped-form] #wpforms-28155-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28155-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_6-container[data-zi-field-enriched="false"] { display: block !important; }

Class members may submit a claim for reimbursement of documented, unreimbursed losses due to the data breach up to a maximum of $5,000 per class member. Alternatively, a claim may be submitted for a pro rata cash payment, estimated to be approximately $100 per class member. In addition to one of those cash payments, class members may claim one year of medical data monitoring services. The deadline for filing an objection and opting out of the settlement is December 8, 2026. Claims must be submitted by January 7, 2027, and the final fairness hearing has been scheduled for January 28, 2027.

The post Judge Approves $3.9M ArCare Data Breach Settlement appeared first on The HIPAA Journal.

Judge Certifies Classes in Meta Platforms Healthcare Data Privacy Litigation

A judge has certified classes in consolidated class action litigation against Meta Platforms Inc. over the use of the Meta Pixel tool on healthcare provider and prescription drug provider websites, portals, and applications. Multiple class action lawsuits were filed against Meta Platforms over the use of the Meta Pixel tool on healthcare websites and applications. The lawsuits were consolidated – In Re Meta Pixel Healthcare Litigation – in the United States District Court for the Northern District of California.

The plaintiffs allege that their medical privacy was violated through the improper use of the tracking tool on healthcare websites, which intercepted communications and transmitted sensitive information to Meta Platforms, without patients’ knowledge or consent. The data collected included personally identifiable information and information about patients’ medical conditions, prescriptions, and interactions with their healthcare providers, identifying them as patients. The data collected is monetized by Meta Platforms and used to provide targeted advertising on Meta sites and elsewhere on the web.

The lawsuit alleges that Meta Platforms is aware that its tool is being used on healthcare websites and is collecting sensitive patient data without HIPAA authorizations or consent. The plaintiffs have identified more than 660 hospital systems and medical providers that have added Meta Pixel to their websites and applications. The plaintiffs allege that the addition of the tool on healthcare websites violates Meta Platforms’ contract with its users and federal and state laws.

Meta Platforms disagrees with the claims in the lawsuit and twice sought to have the litigation dismissed. The litigation was allowed to proceed, and on October 30, 2026, U.S. District Court Judge William Orrick of the Northern District of California certified four classes of Facebook users, who allege that their sensitive data was unlawfully collected by Meta Platforms from June 17, 2018, to the present.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please enable JavaScript in your browser to complete this form.

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

@media only screen and (min-width: 961px) { .inpage_mobile { display: none; } .inpage_banner_12838 { margin-bottom: 18px; } .inpage_banner_12838 a { max-width: 80%; display: block; margin: 0 auto; } } @media only screen and (max-width: 960px) { .inpage_desktop { display: none; } } .hj_co_m_12838 { margin-bottom: 30px; } .hj_co_m_12838 .sbwf-main-form-container { max-width: 340px; margin: 0 auto; box-shadow: 0 4px 6px rgba(0,0,0,0.05),0 6px 6px rgba(0,0,0,0.05); padding: 30px; box-sizing: border-box; border: 1px solid #f4f4f4; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 200px; margin: 0 auto; display: block; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { text-align: center; border-top: 1px dashed #c8c8c8; padding: 20px 0 0; margin: 30px 0 20px; color: #753043; font-weight: 600; line-height: 30px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { text-align: center; font-size: 16px; color: #3B3B3B; line-height: 24px; font-weight: 600; margin: 0; padding: 0; } #sidebar .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 span { font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container p.terms, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms { text-align: center; font-size: 11px; padding-bottom: 0; line-height: 19px; margin: 10px 0 10px; } .hj_co_m_12838 .sbwf-main-form-container p.terms a { color: #753044; text-decoration: none; } .hj_co_m_12838 .sbwf-main-form-container p.terms a:hover { text-decoration: underline; } .hj_co_m_12838 .sbwf-main-form-container p.terms_title, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms_title { text-align: center; font-size: 11px; font-weight: 600; color: #752f43; padding-bottom: 0; line-height: 19px; } .hj_co_m_12838 .sbwf-main-form-container p.info, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.info { text-align: center; color: #727272; font-size: 14px; line-height: 20px; padding-bottom: 20px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input.wpforms-field-medium { width: 100%; max-width: 100%; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form .wpforms-field { padding-top: 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="text"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="email"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="tel"] { border: 2px solid #f4f3f3; font-size: 14px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full { margin: 24px 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 260px; height: 61px; font-size: 16px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_co_m_12838 .sbwf-main-form-container { padding: 20px; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 170px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { font-size: 22px; line-height: 28px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { font-size: 18px; line-height: 24px; } .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="text"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="email"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="tel"] { height: 36px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 220px; height: 52px; font-size: 15px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_sb_m_12838 div.wpforms-container-full .wpforms-form .wpforms-field-row.wpforms-field-medium { max-width: 100%; } form[data-zi-mapped-form] #wpforms-28160-field_1, form[data-zi-mapped-form] #wpforms-28160-field_1-last, form[data-zi-mapped-form] #wpforms-28160-field_3-container, form[data-zi-mapped-form] #wpforms-28160-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28160-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_6-container[data-zi-field-enriched="false"] { display: block !important; } form[data-zi-mapped-form] #wpforms-28155-field_1, form[data-zi-mapped-form] #wpforms-28155-field_1-last, form[data-zi-mapped-form] #wpforms-28155-field_3-container, form[data-zi-mapped-form] #wpforms-28155-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28155-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_6-container[data-zi-field-enriched="false"] { display: block !important; }

The four classes sought certification of claims for breach of contract, breach of implied contract, intrusion upon seclusion, and violation of the California Comprehensive Computer Data Access (CIPA) and Fraud Act (CDAFA). Three of the classes also assert claims for violations of the federal Electronic Communications Privacy Act and the California Invasion of Privacy Act. The CIPA claim was limited to a California subclass.

The four classes certified by the judge are the

  • Patient Status Button-Click Class: Includes all Facebook users who had at least one patient portal, medical appointment, bill payment, or diagnostic assessment button click obtained from Meta Platforms from class healthcare providers.
  • The Patient Health Information Class: Includes all Facebook users who had at least one communication or fact identifying a doctor, condition, or treatment acquired by Meta Platforms from class healthcare providers, excluding events in the Patient Status Button-Click Class.
  • The Prescription Drug Information Class: Includes all Facebook users who had communications with a prescription drug provider website for which they have a prescription obtained by Meta Platforms.
  • The Patient Device Intrusion Class: Includes all Facebook users for whom Meta placed an _fbp cookie and/or used computing resources by sending data to Meta through their device and/or by computing Core Setup logic on their device while at a healthcare provider property.

There is no private cause of action in the Health Insurance Portability and Accountability Act (HIPAA), so patients may not take legal action over HIPAA violations. The lawsuit does not assert any claims for violations of the HIPAA Rules; however, the lawsuit does reference HIPAA. The judge determined that HIPAA is relevant to establishing reasonable consumer expectation and possibly a reasonable consumer understanding of the meaning of Meta’s contractual promises regarding partners having lawful rights over the information transferred to Meta via the tool.

Class certification is only one stage in the legal process. The judge has not made any ruling about whether Meta Platforms violated any laws. Meta Platforms has stated that it disagrees with the class certification ruling and plans to appeal. Should that appeal fail, the classes will need to be refined, a formal notice plan agreed, and class members will be given the opportunity to remain or opt out.

Many class action lawsuits have been filed against healthcare providers over their use of Meta Pixel and other website tracking tools. The majority of certified class action lawsuits have resulted in settlements, rather than a trial. Defendants could face a massive jury verdict, while the plaintiffs might lose and face substantial legal costs.

The post Judge Certifies Classes in Meta Platforms Healthcare Data Privacy Litigation appeared first on The HIPAA Journal.

Critical Infrastructure Orgs Warned of Cyberattacks on Refrigeration and Cold Chain Monitoring Systems

A joint cybersecurity warning has been issued by the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Department of Health and Human Services, and other government agencies warning of potential cyberattacks targeting the refrigeration and cold chain monitoring systems used in healthcare and public health and other critical infrastructure sectors.

Attacks on European Refrigeration Facilities

The warning was issued days after a series of cyberattacks on the refrigeration systems used by the food supply chain in Europe. An unknown hacker or group started hitting refrigeration systems in mid-October, raising the temperature of cooling units. In one instance, parameters were altered that would have raised temperatures to 302°F (150°C) had the issue not been identified and corrected. Hundreds of supermarkets in France were forced to throw away large amounts of produce due to dangerously high temperatures caused by remote activation of defrosting functions in refrigerators and freezers, and attacks have since spread across Europe.

The French blood bank, EFS, was caught up in the attacks and experienced a near-catastrophic temperature rise due to remotely altered temperature and defrosting thresholds. EFS reported that temperatures were increased to very high levels in certain cold storage rooms used to keep blood products prior to distribution to healthcare and manufacturing facilities. Fortunately, the temperature increase was identified, and action was taken in time to prevent catastrophic loss of blood products.

While the source of the attacks has not been confirmed, analyses have shown that the bulletproof hosting used in the attacks has previously been used by Russia-linked malicious operations, although that alone does not confirm these as state-sponsored hacking attempts. In many cases, temperature control systems were remotely accessed using the manufacturer’s default credentials.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please enable JavaScript in your browser to complete this form.

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

@media only screen and (min-width: 961px) { .inpage_mobile { display: none; } .inpage_banner_12838 { margin-bottom: 18px; } .inpage_banner_12838 a { max-width: 80%; display: block; margin: 0 auto; } } @media only screen and (max-width: 960px) { .inpage_desktop { display: none; } } .hj_co_m_12838 { margin-bottom: 30px; } .hj_co_m_12838 .sbwf-main-form-container { max-width: 340px; margin: 0 auto; box-shadow: 0 4px 6px rgba(0,0,0,0.05),0 6px 6px rgba(0,0,0,0.05); padding: 30px; box-sizing: border-box; border: 1px solid #f4f4f4; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 200px; margin: 0 auto; display: block; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { text-align: center; border-top: 1px dashed #c8c8c8; padding: 20px 0 0; margin: 30px 0 20px; color: #753043; font-weight: 600; line-height: 30px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { text-align: center; font-size: 16px; color: #3B3B3B; line-height: 24px; font-weight: 600; margin: 0; padding: 0; } #sidebar .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 span { font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container p.terms, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms { text-align: center; font-size: 11px; padding-bottom: 0; line-height: 19px; margin: 10px 0 10px; } .hj_co_m_12838 .sbwf-main-form-container p.terms a { color: #753044; text-decoration: none; } .hj_co_m_12838 .sbwf-main-form-container p.terms a:hover { text-decoration: underline; } .hj_co_m_12838 .sbwf-main-form-container p.terms_title, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms_title { text-align: center; font-size: 11px; font-weight: 600; color: #752f43; padding-bottom: 0; line-height: 19px; } .hj_co_m_12838 .sbwf-main-form-container p.info, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.info { text-align: center; color: #727272; font-size: 14px; line-height: 20px; padding-bottom: 20px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input.wpforms-field-medium { width: 100%; max-width: 100%; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form .wpforms-field { padding-top: 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="text"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="email"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="tel"] { border: 2px solid #f4f3f3; font-size: 14px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full { margin: 24px 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 260px; height: 61px; font-size: 16px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_co_m_12838 .sbwf-main-form-container { padding: 20px; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 170px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { font-size: 22px; line-height: 28px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { font-size: 18px; line-height: 24px; } .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="text"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="email"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="tel"] { height: 36px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 220px; height: 52px; font-size: 15px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_sb_m_12838 div.wpforms-container-full .wpforms-form .wpforms-field-row.wpforms-field-medium { max-width: 100%; } form[data-zi-mapped-form] #wpforms-28160-field_1, form[data-zi-mapped-form] #wpforms-28160-field_1-last, form[data-zi-mapped-form] #wpforms-28160-field_3-container, form[data-zi-mapped-form] #wpforms-28160-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28160-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_6-container[data-zi-field-enriched="false"] { display: block !important; } form[data-zi-mapped-form] #wpforms-28155-field_1, form[data-zi-mapped-form] #wpforms-28155-field_1-last, form[data-zi-mapped-form] #wpforms-28155-field_3-container, form[data-zi-mapped-form] #wpforms-28155-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28155-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_6-container[data-zi-field-enriched="false"] { display: block !important; }

Warning to U.S. Critical Infrastructure Entities

While the current wave of attacks appears to be targeted at Europe, attacks may spread globally. The warning applies to every organization that uses refrigeration and monitoring systems, including healthcare organizations, food and chemical production facilities, and transportation, as they could potentially be targeted. According to the alert, malicious cyber actors are targeting vulnerabilities and weaknesses in unpatched or internet-accessible temperature controllers and commercial refrigeration controllers. Successful attacks could result in food spoilage, loss of inventory, fire hazards, and hardware damage.

Hackers are gaining access to temperature control systems remotely, so the most logical step to take to harden security is to ensure that the control systems cannot be accessed via the internet. In many attacks, default credentials have been used to alter temperature control settings. All default passwords should be changed, and passwords strengthened to protect against brute force attempts to guess passwords. All software should be kept up to date, with patches applied promptly, and if legacy devices are used that are no longer supported by the vendor, they should be retired and replaced.

“Industrial refrigeration and cold-chain monitoring systems protect food, medicine, and other temperature-sensitive products, making them attractive targets for malicious cyber actors,” explained FBI Cyber Branch Operations Director Brett Leatherman. “We are seeing these systems targeted across critical infrastructure sectors globally, putting inventory and equipment at risk. This fact sheet provides clear, practical steps that network defenders can take to reduce that risk and protect operations. The FBI urges every organization that relies on these systems to review our guidance, implement the recommended mitigations, and report any suspicious activity to the FBI.”

The post Critical Infrastructure Orgs Warned of Cyberattacks on Refrigeration and Cold Chain Monitoring Systems appeared first on The HIPAA Journal.

Free Webinar: The Most Overlooked HIPAA Challenges of 2026

Do your employees know the right thing to do in each of these common HIPAA challenges faced by medical practices?

An online review calls for a response.

A patient asks for a copy of their records.

A new vendor needs access to patient information.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please enable JavaScript in your browser to complete this form.

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

@media only screen and (min-width: 961px) { .inpage_mobile { display: none; } .inpage_banner_12838 { margin-bottom: 18px; } .inpage_banner_12838 a { max-width: 80%; display: block; margin: 0 auto; } } @media only screen and (max-width: 960px) { .inpage_desktop { display: none; } } .hj_co_m_12838 { margin-bottom: 30px; } .hj_co_m_12838 .sbwf-main-form-container { max-width: 340px; margin: 0 auto; box-shadow: 0 4px 6px rgba(0,0,0,0.05),0 6px 6px rgba(0,0,0,0.05); padding: 30px; box-sizing: border-box; border: 1px solid #f4f4f4; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 200px; margin: 0 auto; display: block; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { text-align: center; border-top: 1px dashed #c8c8c8; padding: 20px 0 0; margin: 30px 0 20px; color: #753043; font-weight: 600; line-height: 30px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { text-align: center; font-size: 16px; color: #3B3B3B; line-height: 24px; font-weight: 600; margin: 0; padding: 0; } #sidebar .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 span { font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container p.terms, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms { text-align: center; font-size: 11px; padding-bottom: 0; line-height: 19px; margin: 10px 0 10px; } .hj_co_m_12838 .sbwf-main-form-container p.terms a { color: #753044; text-decoration: none; } .hj_co_m_12838 .sbwf-main-form-container p.terms a:hover { text-decoration: underline; } .hj_co_m_12838 .sbwf-main-form-container p.terms_title, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.terms_title { text-align: center; font-size: 11px; font-weight: 600; color: #752f43; padding-bottom: 0; line-height: 19px; } .hj_co_m_12838 .sbwf-main-form-container p.info, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.info { text-align: center; color: #727272; font-size: 14px; line-height: 20px; padding-bottom: 20px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input.wpforms-field-medium { width: 100%; max-width: 100%; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form .wpforms-field { padding-top: 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="text"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="email"], .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form input[type="tel"] { border: 2px solid #f4f3f3; font-size: 14px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full { margin: 24px 0; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 260px; height: 61px; font-size: 16px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_co_m_12838 .sbwf-main-form-container { padding: 20px; } .hj_co_m_12838 .sbwf-main-form-container img { max-width: 170px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 { font-size: 22px; line-height: 28px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title1 span { font-weight: 700; color: #000; padding-top: 4px; display: block; line-height: 34px; } .hj_co_m_12838 .sbwf-main-form-container p.cl_title2, article.entry-content .lp-main .lp-main-content .hj_co_m_12838 .sbwf-main-form-container p.cl_title2 { font-size: 18px; line-height: 24px; } .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="text"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="email"], .hj_co_m_12838 div.wpforms-container-full .wpforms-form input.wpforms-field-medium[type="tel"] { height: 36px; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"] { border: 0; color: #fff; margin: 0 auto; display: flex; align-items: center; justify-content: center; box-sizing: border-box; padding: 0 65px 0 30px; background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn.png); background-color: unset; background-size: cover; background-repeat: no-repeat; width: 220px; height: 52px; font-size: 15px; font-weight: 600; } .hj_co_m_12838 .sbwf-main-form-container div.wpforms-container-full .wpforms-form button[type="submit"]:hover { background-image: url(https://www.hipaajournal.com/wp-content/uploads/2026/08/btn_hover.png); background-color: unset; border: 0; } .hj_sb_m_12838 div.wpforms-container-full .wpforms-form .wpforms-field-row.wpforms-field-medium { max-width: 100%; } form[data-zi-mapped-form] #wpforms-28160-field_1, form[data-zi-mapped-form] #wpforms-28160-field_1-last, form[data-zi-mapped-form] #wpforms-28160-field_3-container, form[data-zi-mapped-form] #wpforms-28160-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28160-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28160-field_6-container[data-zi-field-enriched="false"] { display: block !important; } form[data-zi-mapped-form] #wpforms-28155-field_1, form[data-zi-mapped-form] #wpforms-28155-field_1-last, form[data-zi-mapped-form] #wpforms-28155-field_3-container, form[data-zi-mapped-form] #wpforms-28155-field_6-container { display: none; } form[data-zi-mapped-form] #wpforms-28155-field_1[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_1-last[data-zi-input-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_3-container[data-zi-field-enriched="false"], form[data-zi-mapped-form] #wpforms-28155-field_6-container[data-zi-field-enriched="false"] { display: block !important; }

Overlooked areas can quickly turn into HIPAA problems

In this live webinar Sidney Secchiaroli and Sean Harris will share the common questions they field every day, and the biggest challenges practices either don’t know to explore or completely forget about,

Sidney and Sean have helped hundred’s of medical practices work through day-to-day HIPAA and OSHA compliance questions. They’ll explain what gets missed, where things tend to go wrong and what you can do differently in your practice.

You’ll learn how to:

  • Take the right first steps after a suspected HIPAA incident and assess whether it’s a breach.
  • Avoid common mistakes when responding to patient requests for copies of their records.
  • The do’s and don’ts when dealing with vendors.
  • Handle patient testimonials and respond to online reviews (negative and positive) without disclosing Protected Health Information.

Date of Live Webinar: November 18, 2026

Time: 12 PM ET, 11AM CT, 10 AM MT, 09 AM  PT

Duration: 01:00 Hour

Can’t join live? Register and we’ll send you the recording. 


About The Speakers:

As customer support specialists at Abyde, Sidney Secchiaroli and Sean Harris serve as dedicated HIPAA and OSHA compliance resources for thousands of Abyde’s  medical practice customers. Together, they work hands-on with practices nationwide, answering questions, guiding them through their unique situations, and keeping them confident and audit-ready.

Sidney Secchiaroli Customer Success SpecialistSidney Secchiaroli | Customer Success Specialist, Abyde

Sidney Secchiaroli brings a firsthand understanding of how a busy medical practice operates from her work as a certified medical assistant. At Abyde, she draws on that experience to help practice teams apply HIPAA and OSHA requirements to their daily work. She’ll bring that frontline perspective to the webinar, showing where HIPAA can get overlooked during routine tasks and what teams can do about it.

Sean Harris Customer Success SpecialistSean Harris | Customer Success Specialist, Abyde

Sean Harris has been helping practices with compliance at Abyde since at least 2022. He previously spent several years in construction staffing, where OSHA safety standards were part of daily operations. Today, he helps healthcare teams work through HIPAA and OSHA questions, with a focus on turning requirements into clear steps staff can follow when a problem comes up.

Abyde’s Customer Success team helps thousands of customers across the country put HIPAA requirements into practice.


Date of Live Webinar: November 18, 2026

Time: 12 PM ET, 11AM CT, 10 AM MT, 09 AM  PT

Duration: 01:00 Hour

Can’t join live? Register and we’ll send you the recording. 

The post Free Webinar: The Most Overlooked HIPAA Challenges of 2026 appeared first on The HIPAA Journal.