Carosh Compliance Solutions provides stress-free and trusted HIPAA compliance services

so you can get back to focusing your time on your patients.

Join an Exclusive Community of “Accidental” HIPAA Privacy and Security Officers

Have you been christened the designated privacy and/or security “officer” for your healthcare practice — even though you have little to no relevant training? It’s a tremendous and intimidating responsibility … and a lonely job. Don’t feel alone. HIPAA Happy Hour is THE place to connect with your peers … so you can get support, trade ideas, and pick up tips to do your job more efficiently and effectively.

Make Sure Your HIPAA Program Is Protecting Your Patients' Private Information.

Our half hour assessment to give you confidence in your HIPAA compliance program.

Conduct your own assessment.



Schedule Your Assessment with an Expert


You Don't Have To Do It Alone. We Are Here To Help.

Carosh will create a program for you that is both thorough and affordable, allowing your staff to work more efficiently and effectively. We are certified professionals that will guide you through the process of creating a HIPAA Security and Privacy program for your organization. With services developed specifically for the unique needs of mid-sized and smaller organizations, Carosh Compliance Solutions is here to deliver solutions designed specifically for you.


Watch A Video For More Information.

By Lorna L. Hecker, Ph.D, LMFT, CHPS

Many mental health providers believe that if they uphold their obligation to client confidentiality, they are HIPAA compliant. Others believe that because their electronic health record provider promises HIPAA compliance, they are HIPAA compliant. Both are common myths. The reality is HIPAA is much more complex, requiring ongoing efforts to protect patient information. HIPAA has very specific privacy requirements for managing patient information well beyond the familiar Notice of Privacy Practices, and HIPAA security regulations also compel providers to consider all electronic (and paper) aspects of their practice.

“Search no longer, HIPAA Demystified will be your ultimate guide to HIPAA compliance.”
Norman C. Dasenbrook, MS, LCPC
Dasenbrook Consulting

“This book is an extremely relevant and helpful resource for mental health professionals who strive to maintain the security of protected health information while navigating rapidly changing technologies.”
Mary K. Alvord, Ph.D.
Alvord, Baker & Associates, LLC

“HIPAA Demystified was insightful, informative, well written, and thought-provoking. A must read for any professional, from student to CEO”.
Daniel Lettenberger-Klein M.S., LMFT
Sunrise Detox


3dhipaa compliance iowagibson-logoslittle-client-logo-teaching-tots-to-talkauduboncountycrossmentalhealthClintonCountyiowa-appanooseplainsareamentalhealthcommunity-nurseesperanzafmaagfcsisaciowa-scbhrlenovostoufferclinicalstrategichealthservicesadvancedAISevanstheindependencecentermraiaaffiliafonemedlivinghomecounselingcentertwopoint3d

Name of Covered Entity State Covered Entity Type Individuals Affected Breach Submission Date Type of Breach Breached Information
Complete Chiropractic & Bodywork Therapies MI Healthcare Provider 4082 05/17/2016 Hacking/IT Incident Desktop Computer, Network Server
Family Medicine of Weston FL Healthcare Provider 500 05/11/2016 Hacking/IT Incident Electronic Medical Record
UnityPoint Health Affiliated Covered Entity IA Healthcare Provider 1620 05/11/2016 Unauthorized Access/Disclosure Electronic Medical Record
Lafayette Pain Care PC IN Healthcare Provider 7500 05/09/2016 Hacking/IT Incident Network Server
Southeast Eye Institute, P.A. dba eye Associates of Pinellas FL Healthcare Provider 87314 05/05/2016 Hacking/IT Incident Network Server
UnitedHealth Group Single Affiliated Covered Entity (SACE) MN Health Plan 5330 05/04/2016 Unauthorized Access/Disclosure Paper/Films
Florida Medical Clinic, PA FL Healthcare Provider 1000 05/04/2016 Unauthorized Access/Disclosure Electronic Medical Record
Managed Health Services IN Health Plan 610 05/01/2016 Unauthorized Access/Disclosure Paper/Films
PruittHealth Home Health — Low Country SC Healthcare Provider 1500 04/29/2016 Unauthorized Access/Disclosure Paper/Films
Northstar Healthcare Acquisitions LLC TX Healthcare Provider 19898 04/28/2016 Theft Laptop
Family & Children’s Services of Mid Michigan, Inc. MI Healthcare Provider 981 04/27/2016 Hacking/IT Incident Network Server
Comanche County Hospital Authority OK Healthcare Provider 2199 04/25/2016 Hacking/IT Incident Email
Children’s National Medical Center DC Healthcare Provider 4107 04/25/2016 Unauthorized Access/Disclosure Network Server
Mayfield Clinic Inc OH Healthcare Provider 23341 04/23/2016 Hacking/IT Incident Email
Ohio Department of Mental Health and Addiction Services OH Healthcare Provider 59000 04/22/2016 Unauthorized Access/Disclosure Other
Kaiser Foundation Health Plan, Inc. CA Business Associate 2451 04/22/2016 Theft Paper/Films
Wyoming Medical Center WY Healthcare Provider 3184 04/20/2016 Hacking/IT Incident Email
Lake Pulmonary Critical PA FL Healthcare Provider 648 04/20/2016 Theft Paper/Films
Lake Pulmonary Critical Care PA FL Healthcare Provider 648 04/20/2016 Theft Paper/Films
Quarles & Brady, LLP WI Business Associate 1032 04/19/2016 Theft Laptop
Florida Hospital Medical Group FL Healthcare Provider 1906 04/18/2016 Unauthorized Access/Disclosure Email
Vail Clinic, Inc. dba Vail Valley Medical Center, and dba Howard Head Sports Medicine CO Healthcare Provider 3118 04/15/2016 Unauthorized Access/Disclosure Laptop, Network Server
Atique Orthodontics OR Healthcare Provider 1506 04/15/2016 Hacking/IT Incident Desktop Computer
Oneida Tribe of Indians of Wisconsin WI Healthcare Provider 2734 04/15/2016 Theft Desktop Computer, Other Portable Electronic Device
Florida Department of Health FL Healthcare Provider 1076 04/13/2016 Unauthorized Access/Disclosure Paper/Films
American Fidelity Assurance Company OK Health Plan 2664 04/13/2016 Unauthorized Access/Disclosure Paper/Films
United Community & Family Services CT Healthcare Provider 1000 04/12/2016 Unauthorized Access/Disclosure Email
OptumRx, Inc. CA Healthcare Provider 6229 04/12/2016 Theft Laptop
Sacred Heart Health System, Inc FL Healthcare Provider 532 04/12/2016 Unauthorized Access/Disclosure Other
Mark Anthony Quintero, M.D., L.L.C. FL Healthcare Provider 650 04/12/2016 Hacking/IT Incident Network Server
Pain Treatment Centers of America AR Healthcare Provider 19397 04/11/2016 Hacking/IT Incident Electronic Medical Record, Network Server
BioReference Laboratories, Inc NJ Healthcare Provider 3563 04/08/2016 Unauthorized Access/Disclosure Other
RMA Medical Centers of Florida FL Healthcare Provider 3906 04/07/2016 Theft Laptop
Pacific Gas and Electric Company CA Business Associate 2426 04/05/2016 Unauthorized Access/Disclosure Paper/Films
Target Corporation Health Plan MN Business Associate 719 04/05/2016 Unauthorized Access/Disclosure Paper/Films
Sisters of Charity of Leavenworth Health System Health Benefits Plan CO Business Associate 540 04/05/2016 Unauthorized Access/Disclosure Paper/Films
Einstein Healthcare Network PA Healthcare Provider 2939 04/01/2016 Unauthorized Access/Disclosure Other
Pointe Medical Services, Inc. FL Healthcare Provider 2000 04/01/2016 Theft Desktop Computer, Other Portable Electronic Device
Aurora Health Care, Inc. WI Healthcare Provider 869 04/01/2016 Unauthorized Access/Disclosure Network Server
Mercy Iowa City IA Healthcare Provider 15625 03/25/2016 Hacking/IT Incident Desktop Computer, Email, Network Server
Morton Medical Center, PLLC WA Healthcare Provider 3000 03/24/2016 Hacking/IT Incident Desktop Computer, Network Server
Excel Plus Home Health, Incorporated TX Healthcare Provider 524 03/23/2016 Theft Desktop Computer
Metropolitan Jewish Health System, Inc. d/b/a MJHS NY Business Associate 2483 03/22/2016 Hacking/IT Incident Email
National Counseling Group VA Healthcare Provider 23000 03/21/2016 Hacking/IT Incident Email
Bozeman Health Deaconess Hospital MT Healthcare Provider 1124 03/21/2016 Unauthorized Access/Disclosure Paper/Films
Val Verde Regional Medical Center TX Healthcare Provider 2000 03/18/2016 Hacking/IT Incident Desktop Computer, Electronic Medical Record, Email, Laptop, Network Server
Lindsay House Surgery Center, LLC NY Healthcare Provider 773 03/18/2016 Theft Paper/Films
Hospital for Special Surgery NY Healthcare Provider 647 03/17/2016 Unauthorized Access/Disclosure Email
W. Christopher Bryant DDS PC MI Healthcare Provider 2200 03/17/2016 Loss Other Portable Electronic Device
Laborers Funds Administrative Office of Northern California, Inc. CA Health Plan 2373 03/15/2016 Unauthorized Access/Disclosure Paper/Films
JASACare NY Healthcare Provider 1154 03/14/2016 Hacking/IT Incident Email
Vibrant Body Wellness CA Healthcare Provider 726 03/11/2016 Theft Laptop, Other Portable Electronic Device
Virtua Medical Group NJ Healthcare Provider 1654 03/11/2016 Unauthorized Access/Disclosure Network Server, Other
Karmanos Cancer Center MI Healthcare Provider 2808 03/10/2016 Loss Other Portable Electronic Device
UHHS Geauga Medical Center OH Healthcare Provider 677 03/10/2016 Unauthorized Access/Disclosure Electronic Medical Record
Vidant Health NC Healthcare Provider 897 03/10/2016 Unauthorized Access/Disclosure Other
Cromwell Fire District CT Healthcare Provider 500 03/10/2016 Unauthorized Access/Disclosure Paper/Films
Illinois Valley Podiatry Group IL Healthcare Provider 26588 03/08/2016 Hacking/IT Incident Electronic Medical Record, Network Server
Complete Family Foot Care NE Healthcare Provider 5883 03/07/2016 Hacking/IT Incident Electronic Medical Record, Network Server
Walgreen Co. IL Healthcare Provider 880 03/04/2016 Theft Paper/Films
Premier Healthcare, LLC IN Healthcare Provider 205748 03/04/2016 Theft Laptop
Cardiology Associates of Jonesboro, Inc. AR Healthcare Provider 1669 03/04/2016 Unauthorized Access/Disclosure Paper/Films
21st Century Oncology FL Healthcare Provider 2213597 03/04/2016 Hacking/IT Incident Network Server
City of Hope CA Healthcare Provider 1024 03/04/2016 Hacking/IT Incident Email
Centers Plan for Healthy Living NY Health Plan 6893 03/03/2016 Theft Laptop
Walmart Stores, Inc. AR Healthcare Provider 4800 03/01/2016 Unauthorized Access/Disclosure Electronic Medical Record
Group Life Hospital and Medical Program CT Health Plan 3000 02/29/2016 Hacking/IT Incident Other
Mind Springs Health CO Healthcare Provider 2147 02/27/2016 Unauthorized Access/Disclosure Network Server
Eye Institute of Corpus Christi TX Healthcare Provider 43961 02/26/2016 Theft Electronic Medical Record
Freeport Memorial Hospital IL Healthcare Provider 1349 02/26/2016 Theft Other
Ecolab Health and Welfare Benefits Plan MN Health Plan 1550 02/26/2016 Hacking/IT Incident Network Server
Ecolab Health and Welfare Benefits Plan MN Health Plan 1550 02/26/2016 Hacking/IT Incident Network Server
Nintendo of America Inc. WA Health Plan 6248 02/26/2016 Hacking/IT Incident Network Server
Valley Hope Association KS Healthcare Provider 52076 02/26/2016 Theft Laptop
Vancouver Radiologists, PC WA Healthcare Provider 603 02/26/2016 Unauthorized Access/Disclosure Paper/Films
Locust Fork Pharmacy AL Healthcare Provider 5000 02/26/2016 Unauthorized Access/Disclosure Other
BJC HealthCare ACO, LLC MO Healthcare Provider 2393 02/26/2016 Unauthorized Access/Disclosure Email
ELLIOT J MARTIN CHIROPRACTIC PC NY Healthcare Provider 1200 02/24/2016 Hacking/IT Incident Desktop Computer
Roark’s Pharmacy TN Healthcare Provider 3000 02/19/2016 Theft Network Server
Public Health Trust of Miami-Dade County, Florida FL Healthcare Provider 24188 02/19/2016 Unauthorized Access/Disclosure Electronic Medical Record
Alliance Health Networks, LLC UT Healthcare Provider 42372 02/15/2016 Hacking/IT Incident Network Server
Radiology Regional Center, PA FL Healthcare Provider 483063 02/12/2016 Loss Paper/Films
DataStat, Inc. MI Business Associate 552 02/12/2016 Unauthorized Access/Disclosure Paper/Films
BlueCross BlueShield of South Carolina SC Business Associate 998 02/12/2016 Unauthorized Access/Disclosure Paper/Films
Washington State Health Care Authority WA Health Plan 91187 02/09/2016 Unauthorized Access/Disclosure Email
SEIM JOHNSON, LLP NE Business Associate 30972 02/08/2016 Theft Laptop
Borgess Medical Center d/b/a Borgess Rheumatology MI Healthcare Provider 700 02/05/2016 Unauthorized Access/Disclosure Paper/Films
Rite Aid Store 01617 NY Healthcare Provider 976 02/03/2016 Unauthorized Access/Disclosure Desktop Computer, Other
Grx Holdings, LLC dba Medicap Pharmacy IA Healthcare Provider 2300 02/02/2016 Loss Other
Louisiana Healthcare Connections LA Health Plan 13086 02/02/2016 Theft Other