© 2024 Northeast Indiana Public Radio
A 501(c)3 non-profit organization. Public File 89.1 WBOI

Listen Now · on iPhone · on Android
NPR News and Diverse Music
Play Live Radio
Next Up:
0:00
0:00
0:00 0:00
Available On Air Stations
Support for WBOI.org comes from:

State, northwest Indiana medical company settle lawsuit over exposure of 45K Hoosiers' data

Medical equipment, including a blood pressure pump, affixed to a beige wall in an exam room.
Lauren Chapman
/
IPB News
CarePointe — an ear, nose, throat, sinus and hearing provider — will pay the state $125,000 and develop a written information security program to “protect consumers and ensure further compliance with the law.”

The state has reached a settlement in its lawsuit against a northwest Indiana medical company over a ransomware event that put personal and protected health information at risk. The agreement includes no admission of guilt on the behalf of the provider.

CarePointe — an ear, nose, throat, sinus and hearing provider — will pay the state $125,000 and develop a written information security program to “protect consumers and ensure further compliance with the law.”

The lawsuit said CarePointe was aware of security risks before a ransomware event exposed the information of about 45,000 Indiana patients. It included two counts for violations of federal HIPAA law and two counts for violations of state data privacy and consumer protection laws.

READ MORE: Rokita under investigation again by Indiana attorney disciplinary commission

Join the conversation and sign up for the Indiana Two-Way. Text "Indiana" to 73224. Your comments and questions in response to our weekly text help us find the answers you need on statewide issues.

The settlement requires CarePointe to develop and maintain systems and plans to protect sensitive patient information. This includes designating an individual to be a “HIPAA security officer” who will be responsible for overseeing the security program.

CarePointe will also have to meet training requirements for all personnel with access to personal information and protected health information, including tabletop exercises to test its “preparedness to respond” to security risks.

Abigail is our health reporter. Contact them at aruhman@wboi.org.

Tags
Abigail Ruhman covers statewide health issues. Previously, they were a reporter for KBIA, the public radio station in Columbia, Missouri. Ruhman graduated from the University of Missouri School of Journalism.