CYBERSECURITYTRACKER
Permanent story citation

HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12139

As cited

Copy frozen at (site build).

ransomware

HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network

The U.S. Department of Health and Human Services Office for Civil Rights has settled a ransomware investigation into Lehigh Valley Health Network's 2023 breach by AlphV (aka BlackCat). The health network previously settled civil litigation with patients for $65 million over the incident, which included the public posting of sensitive patient images.

Why it matters: Healthcare organizations face regulatory settlements and civil liability following ransomware attacks; practitioners should review incident response, data protection, and breach notification procedures to avoid similar enforcement actions.

Actorsalphv
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary