The agency said that the company failed to conduct an accurate and thorough risk analysis to identify its systems' potential risks and vulnerabilities.
A new survey posted in the HIPAA Journal, conducted by Netwrix, found that account hijacking and phishing were still extremely prevalent at healthcare organizations.