Idaho State University Settles HIPAA Security Case for $400,000

Idaho State University (ISU) has agreed to pay $400,000 to the U.S. Department of Health Human Services (HHS) for violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule.  This settlement involves the breach of unsecured electronic protected health information (ePHI) of 17,500 individuals who were patients at an ISU clinic.


Content created by Office for Civil Rights (OCR)
Content last reviewed on July 26, 2013