University of Mississippi Medical Center pays $2.75M HIPAA fine

Featured image

Share this article

University of Mississippi Medical Center pays $2.75 HIPAA Fine - Paubox

The University of Mississippi Medical Center (UMMC) has agreed to pay an astounding $2.75M fine to settle multiple HIPAA violations. This is the second multi-million dollar HIPAA fine so far this month.

The HIPAA investigation of UMMC occurred due to a breach of electronic protected health information (ePHI) that affected about 10,000 people. The breach was due to a stolen laptop. Because the laptop had a generic username and password, the laptop allowed an unauthorized party access to their network drives. These drives contained ePHI of approximately 10,000 patients.

The HIPAA investigation also discovered that due to the widespread use of generic username and passwords, unauthorized users could easily join UMMC’s wireless network and immediately access the same network drives.

Further HIPAA violations included:

  • Failure to implement its policies and procedures to prevent, detect, contain, and correct security violations
  • Failure to implement physical safeguards for all workstations that access ePHI to restrict access to authorized users
  • Failure to assign a unique user name and/or number for identifying and tracking user identity in information systems containing ePHI
  • Failure to notify each individual whose unsecured ePHI was reasonably believed to have been accessed, acquired, used, or disclosed as a result of the breach.

About Paubox
Paubox is the easiest way to send and receive secure, HIPAA compliant email.

Try Paubox Email Suite for FREE today.
Author Photo

About the author

Hoala Greevy

Founder of Paubox. Kayak fishing when I can. Native Hawaiian CEO.

Read more by Hoala Greevy

Get started with
end-to-end protection

Bolster your organization’s security with healthcare’s most trusted HIPAA compliant email solution

The #1-rated email encryption 
and security software on G2

G2 Badge: Email Encryption Leader Fall 2022
G2 Badge: Security Best Usability Fall 2022
G2 Badge: Encryption Momentum Leader Fall 2022
G2 Badge: Security Best Relationship Fall 2022
G2 Badge: Security Users Most Likely to Recommend Fall 2022
G2 Badge: Email Gateway Best Relationship Fall 2022
G2 Badge: Email Gateway Best Meets Requirements Fall 2022
G2 Badge - Users Most Likely to Recommend Summer 2022
G2 Badge: Email Gateway Best Results Fall 2022
G2 Badge: Email Gateway Best Usability Fall 2022
G2 Badge: Email Gateway Best Support Fall 2022
G2 Badge: Email Gateway Easiest To Use Fall 2022
G2 Badge: Email Gateway Easiest Setup Fall 2022
G2 Badge: Email Gateway Easiest Admin Fall 2022
G2 Badge: Email Gateway Easiest to do Business with Fall 2022
G2 Badge: Email Gateway Highest User Adoption 2022
G2 Badge: Email Gateway High Performer Fall 2022
G2 Badge: Email Gateway Momentum Leader Fall 2022
G2 Badge: Email Gateway Most Implementable Fall 2022
G2 Badge: Email Gateway Users Most Likely to Recommend Fall 2022