HHS Office for Civil Rights Settles HIPAA Phishing Cybersecurity Investigation with Solara Medical Supplies, LLC for $3,000,000 — $3,000,000
Resolution Jan 2025
Penalty
$3,000,000
Action type
Settlement
Entity profile
—
Case number
—
What went wrong
HHS Office for Civil Rights Settles HIPAA Phishing Cybersecurity Investigation with Solara Medical Supplies, LLC for $3,000,000 - January 14, 2025
Timeline
- ResolutionJan 2025
- Incident and investigation milestones are not consistently published by OCR in machine-readable form.
Key takeaways for your organization
- Align policies, procedures, and evidence with the specific CFR provisions cited in OCR resolutions affecting your entity type.
- Run tabletop exercises for breach response, OCR inquiry handling, and privilege-preserving communications with counsel.
- Revisit business associate inventory and downstream vendor security assurances after major enforcement themes in your sector.
Related actions
OCR Resolves Twentieth Investigation in HIPAA Right of Access Initiative with $80,000 Settlement
—
$80,000
Clinical Laboratory Pays $25,000 to Settle Potential HIPAA Security Rule Violations
—
$25,000
HHS Office for Civil Rights Imposes a $200,000 Penalty Against Oregon Health & Science University for Failure to Provide Timely Access to Patient Records
—
$200,000
Source
U.S. Department of Health and Human Services release
Source: U.S. Department of Health and Human Services, Office for Civil Rights. medcomply.ai aggregates public materials for educational use — not legal advice.