The U.S. Department of Health and Human Services issued its 2018 HIPAA breach report. The report provides an overview of the HIPAA breach notification requirements and provides data on breaches reported to HHS.
In 2018, HHS received notice of 302 large breach notifications impacting more than 21 million individuals and 63,098 small breach notifications impacting 296,948 individuals.
The largest category of breaches involving 500 or more individuals resulted from hacking/IT incidents. Email was the most frequent category of breach. For smaller breaches, unauthorized disclosure was the most frequent type of breach and paper records were the largest category by location.
A copy of the full report may be accessed by clicking here.