Montefiore settles with OCR for $4.75M over stolen ePHI

​A decade ago, malicious insiders sold patient health data to an identity theft crime ring and put the non-profit provider into a HIPAA investigation. OCR reminds health systems that they have a giant target – no matter their size or stature.