OCR Secures Two HIPAA Settlements Addressing Insider Threats and Ransomware Vulnerabilities

The U.S. Department of Health and Human Services Office for Civil Rights (OCR) recently announced two settlements over alleged violations of the HIPAA Security Rule— one with BayCare Health System, a Florida health care provider, and the other with Comstar, LLC, a Massachusetts billing services company — underscoring the agency’s continued HIPAA enforcement focus.