HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network - Takeaways - MDSpire
Coming Soon: Introducing MDSpire News. Learn more
Conexiant’s news site is now MDSpire News. Learn more

HHS Civil Rights Office Resolves Ransomware Probe Involving Lehigh Valley Health Network

  • By

  • Office for Civil Rights (OCR)

  • October 29, 2026

Share

  • 1

    HHS OCR resolved its investigation of Lehigh Valley Health Network with an $800,000 payment and a 3-year corrective action plan monitored by OCR.

  • 2

    The ransomware attack, detected February 4, 2023, exposed and led to the dark-web posting of PHI belonging to 248,359 individuals.

  • 3

    Exposed information included sensitive photographs of cancer patients receiving radiation oncology treatment and personal, financial, diagnostic, and treatment data.

  • 4

    OCR found LVHN may have violated HIPAA rules by failing to conduct a comprehensive risk analysis, review system activity, and provide timely breach notifications.

  • 5

    LVHN’s corrective action plan includes risk analysis and management, review of HIPAA policies and procedures, and workforce training.

Original Source(s)

HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network

  • by Office for Civil Rights (OCR)

  • October 29, 2026

Related Content

FDA adds generic valganciclovir oral solution

 The new option is indicated for CMV prophylaxis in pediatric kidney and heart transplant recipients, as well as adult CMV retinitis and transplant prophylaxis.

GC×GC Detective Stories: Closing the Case?

Pierre-Hugues Stefanuto on the achievements, bottlenecks and open questions in modern GC×GC

CDC mandates Ebola attestation for US-bound flights

The new requirement applies to US citizens, permanent residents, and foreign travelers.