Doctors’ Management Services agreed to settle claims it did not comply with HIPAA breach rules and failed to identify risks after a cyberattack exposed the information of more than 200,000 patients.
When physicians at Aspirus St Luke’s Hospital in Duluth, Minnesota, were given an ultimatum to sign amendments to their contracts after a merger or lose their jobs, they called their employer’s bluff.