The first ransomware victim fined for a data breach by the Department of Health and Human Services (HHS), Massachusetts-based Doctor Management Group has agreed to a $100,000 settlement and three years of HIPAA compliance monitoring. The company was attacked with GandCrab ransomware in 2019 but the breach was traced back to April 2017. The HHS found potential HIPAA violations such as a failure to conduct an accurate security risk analysis.

Bill would expand access to digital therapeutics
Sens. Capito and Shaheen reintroduced the Access to Prescription Digital Therapeutics Act of 2023, aiming to expand access to FDA-approved software treatments for Medicare patients.