The U.S. Department of Health and Human Services settled with Saint Joseph’s Medical Center in Yonkers for unlawfully releasing COVID-19 patients’ health information to the media. The hospital must pay $80,000, implement a corrective action plan, and train staff on HIPAA compliance. OCR has been cracking down on PHI breaches, with large fines imposed on violators. Healthcare providers must prioritize patient privacy and follow the law.

Cybercriminals Use Malware-Laced Fake Resumes to Target Recruiters
Cybersecurity firm Arctic Wolf Labs warns of an ongoing spear-phishing campaign ‘Venom Spider’ or ‘TA4557’ targeting recruiters and hiring managers with malware hidden in phony