The Office for Civil Rights (OCR) of the U.S. Department of Health and Human Services (DHHS) reached a record $4.8 million settlement with New York-Presbyterian Hospital and Columbia University on May 6, 2014 for violations of the HIPAA Security Rule involving 6,800 patients. The significance of this settlement, though, goes beyond its size. OCR, in its press release found a breach in exposure of patient information to Internet search engines.
Kenneth N. Rashbaum