[{"innerBlocks":[],"name":"core\/freeform","postId":3277,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"The state of New York has reached a legal settlement with CoPilot Provider Support Services, after the state charged that the vendor, which provides a variety of services to healthcare organizations, didn\u2019t notify more than 220,000 patients in a timely manner that their protected health information had been compromised.

Under terms of the settlement, CoPilot will pay a $130,000 fine and improve its notification and legal compliance programs.

\u201cHealthcare services providers have a duty to protect patient records as securely as possible and to provide notice when a breach occurs,\u201d New York Attorney General Eric Schneiderman said in a statement. \u201cWaiting over a year to provide notice is unacceptable.\u201d

CoPilot serves the life sciences and healthcare provider sectors in many ways. Its services and products include software integration, data analytics and dashboards, e-prescribing, web portals, sales training, clinical trials and reimbursement support, among other offerings.

CoPilot did not respond to a request for comment on the charge or settlement.

Also See:<\/b> Organizations reporting breaches quicker to federal agencies<\/a>

The company operates a web site that physicians use to verify if a medication is covered by a patient\u2019s insurance plan. In October 2015, an intruder accessed the web site and downloaded reimbursement-related data on 221,178 patients. Compromised information included names, gender, dates of birth, addresses, phone numbers and insurance information.

The compromised data included that of 25,561 residents of New York state, with 11,372 of the residents also having their Social Security numbers compromised\u2014that gave Schneiderman\u2019s office the authority to investigate the breach.

The FBI also investigated at CoPilot\u2019s request. However, the New York attorney general office contends that patient notification didn\u2019t begin until January 2017.

\u201cAlthough CoPilot asserted that the delay in providing notice was due to an ongoing investigation by law enforcement, the FBI never determined that consumer notification would compromise the investigation and never instructed CoPilot to delay victim notifications,\u201d according to Schneiderman, who further charged that state law requires notification as soon as possible.

Under the settlement, all officers, managers and employees of CoPilot will receive legal compliance training, and the company in the future should not delay notification of a breach unless explicitly directed by law enforcement.","saveContent":"The state of New York has reached a legal settlement with CoPilot Provider Support Services, after the state charged that the vendor, which provides a variety of services to healthcare organizations, didn\u2019t notify more than 220,000 patients in a timely manner that their protected health information had been compromised.

Under terms of the settlement, CoPilot will pay a $130,000 fine and improve its notification and legal compliance programs.

\u201cHealthcare services providers have a duty to protect patient records as securely as possible and to provide notice when a breach occurs,\u201d New York Attorney General Eric Schneiderman said in a statement. \u201cWaiting over a year to provide notice is unacceptable.\u201d

CoPilot serves the life sciences and healthcare provider sectors in many ways. Its services and products include software integration, data analytics and dashboards, e-prescribing, web portals, sales training, clinical trials and reimbursement support, among other offerings.

CoPilot did not respond to a request for comment on the charge or settlement.

Also See:<\/b> Organizations reporting breaches quicker to federal agencies<\/a>

The company operates a web site that physicians use to verify if a medication is covered by a patient\u2019s insurance plan. In October 2015, an intruder accessed the web site and downloaded reimbursement-related data on 221,178 patients. Compromised information included names, gender, dates of birth, addresses, phone numbers and insurance information.

The compromised data included that of 25,561 residents of New York state, with 11,372 of the residents also having their Social Security numbers compromised\u2014that gave Schneiderman\u2019s office the authority to investigate the breach.

The FBI also investigated at CoPilot\u2019s request. However, the New York attorney general office contends that patient notification didn\u2019t begin until January 2017.

\u201cAlthough CoPilot asserted that the delay in providing notice was due to an ongoing investigation by law enforcement, the FBI never determined that consumer notification would compromise the investigation and never instructed CoPilot to delay victim notifications,\u201d according to Schneiderman, who further charged that state law requires notification as soon as possible.

Under the settlement, all officers, managers and employees of CoPilot will receive legal compliance training, and the company in the future should not delay notification of a breach unless explicitly directed by law enforcement.","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Provider services vendor CoPilot agrees to a breach settlement

More for you