Skip to main content


U.S. flag
      An official website of the United States government
              Here’s how you know
        Here’s how you knowDot gov**Official websites use .gov**
                 A **.gov** website belongs to an official government organization in the United States.
                  HTTPS**Secure .gov websites use HTTPS**
                 A **lock** (A locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. 
  Menu Close
          Enter the terms you wish to search for.
    Search
        








  
  
    

  
      

                                      About HHS
    
                        
                              
      
      
      Programs & Services
    
                        
                              
      
      
      Grants & Contracts
    
                        
                              
      
      
      Laws & Regulations                  
Health Information Privacy
  HIPAA for Individuals
    
                        
                                            
      
      
      Filing a Complaint
    
                        
                                            
      
      
      HIPAA for Professionals
    
                        
                                            
      
      
      Newsroom

              

    



Breadcrumb
    HHS
                              HIPAA Home
                              For Professionals
                              The Security Rule
                              Security Rule Guidance Material
                              Cyber Security Guidance Material
                              Cybersecurity Newsletters Archive


    

    

    Navigate to:
  HIPAA for Professionals
    
                                    
                                            
            
      
      
      
      Regulatory Initiatives
    
                                                  
                                                                  
            
      
      
      
      Privacy
                                            
            
            Summary of the Privacy Rule
    
                                                  
                                            
            
      
      
      
      Guidance
    
                                                  
                                            
            
      
      
      
      Combined Text of All Rules
    
                                                  
                                            
            
      
      
      
      HIPAA Related Links
    
                                                  
                                                                  
            
      
      
      
      Security
                                            
            
            Summary of the Security Rule
    
                                                  
                                            
            
      
      
      
      Security Guidance
    
                                                  
                                            
            
      
      
      
      Cyber Security Guidance
    
                                                  
                                                                  
            
      
      
      
      Breach Notification
                                            
            
            Breach Reporting
    
                                                  
                                            
            
      
      
      
      Guidance
    
                                                  
                                            
            
      
      
      
      Reports to Congress
    
                                                  
                                            
            
      
      
      
      Regulation History
    
                                                  
                                                                  
            
      
      
      
      Compliance & Enforcement
                                            
            
            Enforcement Rule
    
                                                  
                                            
            
      
      
      
      Enforcement Process
    
                                                  
                                            
            
      
      
      
      Enforcement Data
    
                                                  
                                            
            
      
      
      
      Resolution Agreements
    
                                                  
                                            
            
      
      
      
      Case Examples
    
                                                  
                                            
            
      
      
      
      Audit
    
                                                  
                                            
            
      
      
      
      Reports to Congress
    
                                                  
                                            
            
      
      
      
      State Attorneys General
    
                                                  
                                                                  
            
      
      
      
      Special Topics
                                            
            
            HIPAA and Part 2
    
                                                  
                                            
            
      
      
      
      Change Healthcare Cybersecurity Incident FAQs
    
                                                  
                                            
            
      
      
      
      HIPAA and COVID-19
    
                                                                
                                                                  
            
      
      
      
      HIPAA and Reproductive Health
                          
            
            HIPAA and Final Rule Notice
    
                                                  
                                            
            
      
      
      
      HIPAA and Telehealth
    
                                                  
                                            
            
      
      
      
      HIPAA and FERPA
    
                                                  
                                            
            
      
      
      
      Research
    
                                                  
                                            
            
      
      
      
      Public Health
    
                                                  
                                            
            
      
      
      
      Emergency Response
    
                                                  
                                            
            
      
      
      
      Health Information Technology
    
                                                  
                                            
            
      
      
      
      Health Apps
    
                                                  
                                                                  
            
      
      
      
      Patient Safety
                                            
            
            Statute & Rule
                          
            
            PSQIA Statute
    
                                                  
                                            
            
      
      
      
      Patient Safety Rule
    
                                                  
                                            
            
      
      
      
      Enforcement
    
                                                  
                                            
            
      
      
      
      Guidance
    
                                                  
                                                                  
            
      
      
      
      Covered Entities & Business Associates
                                            
            
            Business Associate Contracts
    
                                                  
                                            
            
      
      
      
      Business Associates
    
                                    
                                            
            
      
      
      
      Training & Resources
    
                                    
                                            
            
      
      
      
      FAQs for Professionals
    
                                    
                                            
            
      
      
      
      Other Administrative Simplification RulesText resize icon

                    




Cybersecurity Newsletters Archive








  
  
    

  
      



In 2019, OCR moved to quarterly cybersecurity newsletters. The purpose of the newsletters remains unchanged: to help HIPAA covered entities and business associates remain in compliance with the HIPAA Security Rule by identifying emerging or prevalent issues, and highlighting best practices to safeguard PHI.

**Years on this page:**  2018 |  2017 | 2016

2018

January 2018 OCR Cybersecurity Newsletter: Cyber Extortion

February 2018 OCR Cybersecurity Newsletter:  Phishing

March 2018 OCR Cybersecurity Newsletter:  Contingency Planning

April 2018 OCR Cybersecurity Newsletter:  Risk Analyses vs. Gap Analyses-What is the difference? UPDATED

May 2018 OCR Cybversecurity Newsletter:  Workstation Security

June 2018 OCR Cybersecurity Newsletter: Software Vulnerabilities and Patching

July 2018 OCR Cybersecurity Newsletter:  Guidance on Disposing of Electronic Devices and Media

August 2018 OCR Cybersecurity Newsletter:  Considerations for Securing Electronic Media and Devices

October 2018 OCR Cybersecurity Newsletter:  National Cybersecurity Awareness Month



2017

January 2017 OCR Cybersecurity Newsletter: Understanding the Importance of Audit Controls - PDF

February 2017 OCR Cybersecurity Newsletter: Reporting and Monitoring Cyber Threats - PDF

April 2017 OCR Cybersecurity Newsletter: Man-in-the-Middle Attacks and HTTPS Inspection Products - PDF

May 2017 OCR Cybersecurity Newsletter: Cybersecurity Incidents will happen... Remember to Plan, Respond, and Report! - PDF

June 2017 OCR Cybersecurity Newsletter: File Sharing and Cloud Computing: What to Consider?

July 2017 OCR Cybersecurity Newsletter: Train Your Workforce, so They Don’t Get Caught by a Phish!

August 2017 OCR Cybersecurity Newsletter: Protecting yourself from potential scammers while being charitable

September 2017 OCR Cybersecurity Newsletter: National Cybersecurity Awareness Month

October 2017 OCR Cybersecurity Newsletter: Mobile Devices and Protected Health Information (PHI)

November 2017 OCR Cybersecurity Newsletter:  Insider Threats and Termination Procedures

December 2017 OCR Cybersecurity Newsletter: Cybersecurity While on Holiday



2016

February 2016 OCR Cybersecurity Newsletter: Ransomware, Tech Support Scam, and Scam Tracker Tool - PDF

March 2016 OCR Cybersecurity Newsletter: Tips for Keeping PHI Safe, NSA’s Lessons Learned, Malware - PDF

April 2016 OCR Cybersecurity Newsletter: New Cyber Threats and Attacks on the Healthcare Sector - PDF

May 2016 OCR Cybersecurity Newsletter: Is Your Business Associate Prepared for a Security Incident? - PDF

June 2016 OCR Cybersecurity Newsletter: What’s in Your Third-Party Application Software? - PDF

July 2016 OCR Cybersecurity Newsletter: Is your Covered Entity or Business Associate Capable of Responding to a CyberSecurity Incident? - PDF

August 2016 OCR Cybersecurity Newsletter: Do You Know Who Your Employees Are? - PDF

September 2016 OCR Cybersecurity Newsletter: Cyber Threat Information-Sharing - PDF

October 2016 OCR Cybersecurity Newsletter: Mining More than Gold - PDF

November 2016 OCR Cybersecurity Newsletter: What Type of Authentication is Right for you? - PDF

December 2016 OCR Cybersecurity Newsletter: Understanding DoS and DDoS Attacks and Best Practices for Prevention - PDF

                    
  


Content created by Office for Civil Rights (OCR) Content last reviewed April 2, 2019Back to top
    Contact HHS
    
                        
                                            
      
      
      Careers
    
                        
                                            
      
      
      HHS FAQs
    
                        
                                            
      
      
      Nondiscrimination NoticeHHS Archive
    
                        
                                            
      
      
      Accessibility Statement
    
                        
                                            
      
      
      Privacy Policy
    
                        
                                            
      
      
      Viewers & PlayersBudget/Performance
    
                        
                                            
      
      
      Inspector General
    
                        
                                            
      
      
      Web Site Disclaimers
    
                        
                                            
      
      
      EEO/No Fear ActFOIA
    
                        
                                            
      
      
      The White House
    
                        
                                            
      
      
      USA.gov
    
                        
                                            
      
      
      Vulnerability Disclosure Policy
        Sign Up for Email Updates

Receive the latest updates from the Secretary, Blogs, and News Releases.

Sign Up
  HHS Headquarters
          200 Independence Avenue, S.W.
                  Washington, D.C. 20201
                  Toll Free Call Center: 1-877-696-6775​