norm: heritage valley health systemUSno LEI · no CIKMax severity: Low

Canonical registry

Heritage Valley Health System

ent_b9347a67c35ce054a2fcb55e

Compliance scorecard →View in feed →

Disclosures

1

HHS OCR enforcement · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Heritage Valley Health System
Normalized: heritage valley health system— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

FEDERALHHS OCR enforcementas victim2024-07-01
HHS OCR settled with Heritage Valley Health System for $950,000 regarding HIPAA Security Rule failures following a ransomware attack. Heritage Valley failed to conduct a compliant risk analysis, implement a contingency plan, and restrict access to authorized users. The settlement includes a three-year monitored corrective action plan.