FQHC EHR Security Compared: eClinicalWorks, Greenway Health, and NextGen
LATEST • CYBERSECURITY
#Comparative Guide
Continue Reading200 articles
📚 Explore by Healthcare Topic Cluster
Featured Blog
More Blogs
Cybersecurity
8/5/202610 min read
HRSA Cybersecurity Requirements for FQHCs: What Health Center Program Compliance Looks Like in 2026
HRSA's Health Center Program requirements have always addressed patient information protection as a component of the broader operational standards that FQHCs must meet. What has changed in 2026 is the…
Read More#Regulatory#Regulatory Guide
Cybersecurity
8/5/20263 min read
HIPAA Compliance for FQHCs: The Complete 2026 Security Program Guide for Community Health Centers
A Federally Qualified Health Center serving 12,000 patients annually in a rural county is legally required to implement the same HIPAA Security Rule requirements as a major urban hospital system…
Read More#Compliance Guide
Cybersecurity
8/5/20263 min read
Hospice Pharmacy Security: Protecting Controlled Substance Records and Medication Data
Hospice pharmacy management involves a category of patient data that sits at the intersection of two distinct regulatory frameworks: HIPAA's privacy and security requirements for protected health information, and the…
Read More#Comparative Guide
Cybersecurity
8/5/202610 min read
Spiritual Care Documentation Security in Hospice: The Most Sensitive PHI You May Not Be Protecting
In twenty-three years of hospice cybersecurity work, I have never had a hospice administrator proactively raise the security of chaplaincy documentation as a priority. It is always my observation, not…
Read More#Compliance Guide
Cybersecurity
8/5/20269 min read
How Hospice Agencies Can Demonstrate Cybersecurity to Hospital and Health System Partners
Hospital and health system discharge planning teams have become inadvertent cybersecurity assessors. In the wake of high-profile healthcare supply chain breaches — most consequentially the Change Healthcare incident that disrupted…
Read More#Strategy Guide#Hospice#Hospice Agencies
Cybersecurity
8/5/20263 min read
Hospice Merger and Acquisition: Cybersecurity Due Diligence for Buyers and Sellers
Hospice M&A activity has accelerated significantly over the past three years, driven by private equity consolidation, regional health system acquisitions, and the operational pressure that smaller independent hospices face competing…
Read More#Strategy Guide
Cybersecurity
8/5/20269 min read
Bereavement Program Security: Protecting Hospice Family Data After the Patient Has Passed
The CMS Conditions of Participation require hospice agencies to provide bereavement services to surviving families for a period of no less than one year following the patient's death. This requirement…
Read More#Compliance Guide#Compliance
Cybersecurity
8/5/20263 min read
Ransomware and End-of-Life Care: Why Hospice Agencies Cannot Afford Operational Disruption
In October 2024, a mid-size hospice organisation in the Mid-Atlantic region experienced a ransomware attack that rendered their EHR inaccessible for eleven days. During those eleven days, the hospice was…
Read More#Thought Leadership
Cybersecurity
7/31/20269 min read
CMS Conditions of Participation for Hospice: The Cybersecurity Connection You Cannot Ignore
Hospice compliance officers typically maintain two separate compliance frameworks in parallel: the CMS Conditions of Participation framework, which governs clinical quality, patient rights, and care delivery standards; and the HIPAA… <strong>Related CMS Requirement Guide for Other Vertical:</strong> <a href="/blog/cms-conditions-of-participation-home-health-cybersecurity-medicare-2026" title="Home Health version">Home Health version</a>
Read More#Compliance Guide#Compliance#Hospice
Cybersecurity
7/31/20263 min read
Hospice EHR Security Beyond Axxess: Protecting Brightree and MatrixCare Deployments
Brightree and MatrixCare serve significant portions of the hospice EHR market alongside Axxess — each with genuine clinical capability and legitimate security programmes at the application level. The pattern I…
Read More#Technical Guide#Homecare Homebase#Matrixcare
Cybersecurity
7/31/202610 min read
Cybersecurity for Hospice IDG Documentation: Protecting Interdisciplinary Team Records
The interdisciplinary group meeting is the clinical and ethical centre of hospice care — the regular gathering where physician, nurse, social worker, chaplain, aide, and bereavement coordinator review each patient's…
Read More#Compliance#Compliance Guide#Technical Guide
Cybersecurity
7/31/20264 min read
HIPAA Compliance for Hospice Agencies: The 2026 Mandatory Requirements, Volunteer Workforce, and IDG Access Controls
Hospice care is, at its core, about accompanying people through the most profound human experience — the dying process. The information that hospice organisations collect and manage to provide that…
Read More#Hospice#Compliance Guide#Compliance
Cybersecurity
7/31/20263 min read
SHIN-NY and Value-Based Care: How Security Compliance Supports NY Home Health VBP Contracts
New York's Value-Based Payment transformation is reshaping how home health agencies are compensated — moving from a pure fee-for-service model toward outcome-based arrangements that reward agencies for keeping patients healthy,…
Read More#Strategy Guide#Compliance
Cybersecurity
7/31/20263 min read
SHIN-NY Audit Preparation: How to Get Ready for a RHIO Compliance Review
RHIO compliance reviews are no longer a rare occurrence at SHIN-NY participating home health agencies. All four New York RHIOs have expanded their compliance review programmes in response to increasing…
Read More#How-To Guide#How-To-Guide
Cybersecurity
7/31/20263 min read
How SHIN-NY Health Information Exchange Benefits Home Health Outcomes — and the Security It Requires
The compliance-focused discussion of SHIN-NY sometimes obscures a more fundamental point: SHIN-NY participation exists to improve patient care, not to create compliance obligations. The security requirements that come with SHIN-NY…
Read More#Thought Leadership
Cybersecurity
7/31/20263 min read
SHIN-NY Onboarding for New York Home Health Agencies: What to Expect in the First 90 Days
New SHIN-NY participants consistently underestimate the documentation intensity of the onboarding process. The agencies I have seen complete onboarding smoothly — in 60 days or less — are the ones…
Read More#How-To Guide#How-To-Guide
Cybersecurity
7/31/20263 min read
How to Report a SHIN-NY Security Incident: The RHIO Notification Process Step by Step
When a security incident potentially involves SHIN-NY health information exchange data, the notification obligations that arise are parallel to — not instead of — HIPAA notification obligations. This distinction matters…
Read More#How-To-Guide#How-To Guide
Cybersecurity
7/31/20263 min read
SHIN-NY for Multi-Site Agencies: Managing Compliance Across Multiple RHIO Regions
A home health agency serving patients in both the Capital Region and the Finger Lakes region of New York may find itself participating in two separate RHIO networks — Hixny…
Read More#Compliance Guide#Compliance
Cybersecurity
7/31/20263 min read
SHIN-NY vs. HIPAA: Where the Requirements Overlap and Where They Differ
A home health administrator in Syracuse told me recently that her agency had passed its SHIN-NY renewal without any findings and was therefore confident in its HIPAA compliance. I did…
Read More#Explainer
Cybersecurity
7/31/20269 min read
How to Complete the Rochester RHIO CSPP for Western New York Home Health Agencies
The Rochester RHIO serves Western New York including Monroe, Livingston, Ontario, Seneca, Wayne, and Yates counties — one of the most medically integrated regional health markets in New York State,… <strong>Related RHIO Guides for Other NY Regions:</strong> <a href="/blog/healtheconnections-cspp-home-health-central-new-york-syracuse-compliance" title="HealtheConnections/Syracuse (Central NY)">HealtheConnections/Syracuse (Central NY)</a> | <a href="/blog/how-to-complete-the-healthix-cspp-a-field-guide-for-nyc-and-long-island-home-health-agencies" title="Healthix (NYC & Long Island)">Healthix (NYC & Long Island)</a>
Read More#Compliance Guide#Compliance
Cybersecurity
7/29/20263 min read
How to Complete the HealtheConnections CSPP for Central New York Home Health Agencies
HealtheConnections is the SHIN-NY RHIO serving Central New York — a region that includes Onondaga, Oswego, Madison, Cayuga, Cortland, Jefferson, Lewis, and surrounding counties. For home health agencies serving the… <strong>Related RHIO Guides for Other NY Regions:</strong> <a href="/blog/rochester-rhio-cspp-home-health-western-new-york-monroe-county" title="Rochester/Monroe County (Western NY)">Rochester/Monroe County (Western NY)</a> | <a href="/blog/how-to-complete-the-healthix-cspp-a-field-guide-for-nyc-and-long-island-home-health-agencies" title="Healthix (NYC & Long Island)">Healthix (NYC & Long Island)</a>
Read More#Compliance#Comparative Guide
Cybersecurity
7/29/20263 min read
How to Complete the Healthix CSPP: A Field Guide for NYC and Long Island Home Health Agencies
Healthix is the largest New York RHIO by patient population, serving New York City's five boroughs, Long Island, and portions of the Hudson Valley. The breadth and complexity of the… <strong>Related RHIO Guides for Other NY Regions:</strong> <a href="/blog/rochester-rhio-cspp-home-health-western-new-york-monroe-county" title="Rochester/Monroe County (Western NY)">Rochester/Monroe County (Western NY)</a> | <a href="/blog/healtheconnections-cspp-home-health-central-new-york-syracuse-compliance" title="HealtheConnections/Syracuse (Central NY)">HealtheConnections/Syracuse (Central NY)</a>
Read More#Compliance#Compliance Guide
Cybersecurity
7/29/20268 min read
SHIN-NY 2026: What New York Home Health Agencies Must Know About Recent Requirement Updates
SHIN-NY's cybersecurity requirements for participating home health agencies have continued to evolve through 2025 and into 2026, driven by two parallel forces: the 2026 HIPAA Security Rule mandatory updates, which raised the baseline security standard that SHIN-NY compliance reviewers expect to see documented;
Read More#Regulatory#How-To Guide#How-To-Guide
Cybersecurity
7/24/20263 min read
How Home Health Agencies Can Recover From Ransomware Without Paying the Ransom
The decision to pay a ransomware demand is one of the most consequential choices a home health administrator will ever face — made under enormous time pressure, with incomplete information,…
Read More#How-To Guide
Cybersecurity
7/24/20269 min read
Penetration Testing for Home Health Agencies: What It Is, What It Costs, and What to Expect
Annual penetration testing became a mandatory HIPAA Security Rule requirement in 2026, and many home health administrators are encountering the requirement for the first time during their current compliance review…
Read More#Technical Guide
Cybersecurity
7/24/20269 min read
SHIN-NY Annual Renewal: The Complete Step-by-Step Guide for New York Home Health Agencies
SHIN-NY annual renewal is the compliance event that most New York home health agencies handle reactively — receiving the renewal notice from their RHIO and scrambling to update documentation that…
Read More#How-To Guide
Cybersecurity
7/24/20263 min read
DMARC, DKIM, and SPF for Home Health Agencies: Stop Email Domain Spoofing Now
Email domain spoofing is one of the simplest attacks available to cybercriminals — and one of the most consistently underdefended vulnerabilities at home health agencies. Without DMARC, DKIM, and SPF…
Read More#Technical Guide
Cybersecurity
7/23/202610 min read
How Cybercriminals Research Home Health Agencies Before Attacking — and How to Reduce Your Visible Attack Surface
Sophisticated ransomware groups do not select targets randomly. They spend days or weeks conducting open-source intelligence gathering — collecting publicly available information about potential targets to assess their data value,…
Read More#How-To Guide#Thought Leadership
Cybersecurity
7/23/20263 min read
Password Manager Deployment for Home Health Staff: A Practical Implementation Guide
The credential theft data is consistent across every home health sector threat analysis I have reviewed: password reuse between work accounts and consumer websites is the most common credential exposure…
Read More#How-To-Guide
Cybersecurity
7/23/20263 min read
CMS Conditions of Participation and Cybersecurity: What Medicare-Certified Home Health Agencies Must Know
CMS CoP requirements include patient information protection provisions that connect directly to cybersecurity. Here is how a strong security program supports CoP readiness. <strong>Related CMS Requirement Guide for Other Vertical:</strong> <a href="/blog/cms-conditions-of-participation-hospice-cybersecurity-surveyors-2026" title="Hospice version">Hospice version</a> <strong>Related Requirements for Agencies in Both Programs:</strong> <a href="/blog/ny-medicaid-managed-care-cybersecurity-home-health" title="Medicaid (NY) guide">Medicaid (NY) guide</a>
Read More#CMS#Compliance#Home Health
Cybersecurity
7/21/202610 min read
Cybersecurity Beyond the Office: How ShieldForce Protects Home Health Staff Wherever They Work
The conversation about "remote work cybersecurity" has been dominated for the past five years by the image of a corporate employee working from a home office — a professional at…
Read More#workforce compliance#temporary workers#Healthcare Risk Analysis
Cybersecurity
7/20/202613 min read
By Obi Ibeto
Home Health Agency Data Retention: How Long to Keep Records and How to Delete Them Securely
Data retention is the compliance obligation that home health administrators most consistently defer until something forces them to address it. The forcing functions are rarely pleasant: an OCR audit requests…
Read More#Compliance#Thought Leadership#board governance
Cybersecurity
7/20/202614 min read
By Obi Ibeto
Cybersecurity Metrics Every Home Health Agency Board Should See Quarterly
I have sat in on enough home health agency board meetings to know that cybersecurity reporting — when it happens at all — tends to follow one of two patterns.…
Read More#Compliance#thought leadership#, Home Health
Cybersecurity
7/20/20263 min read
By Obi Ibeto
New York SHIELD Act and Home Health Agencies: What State Law Adds Beyond HIPAA
New York's Stop Hacks and Improve Electronic Data Security Act — the SHIELD Act — became effective March 21, 2020, and applies to any person or business that owns or…
Read More#Compliance#HIPAA#security documentation
HIPAA & Compliance
7/20/20263 min read
By Obi Ibeto
HIPAA Employee Offboarding at Home Health Agencies: The Complete Security Checklist
Of all the security compliance failures I encounter at home health agencies, the persistence of former employee access is simultaneously the most common, the most preventable, and the most likely…
Read More#HIPAA#HIPAA Compliance#HIPAA audit
Cybersecurity
7/20/20263 min read
By Obi Ibeto
Cybersecurity Across Multiple Locations: Home Health Franchise Security Management
A home health franchise organisation that operates thirty locations faces a cybersecurity challenge that is qualitatively different from the challenges facing a single-location agency. The single-location agency controls one environment,…
Read More#Cybersecurity ROI#Compliance#M&A cybersecurity
Cybersecurity
7/20/20263 min read
By Obi Ibeto
HIPAA and AI Documentation: What Home Health Agencies Must Record in 2026
Artificial intelligence tools have entered home health operations at a pace that has significantly outrun the compliance frameworks most agencies have in place to govern their use. Care coordinators use…
Read More#AI#AI Security#checklist
Cybersecurity
7/20/20263 min read
By Obi Ibeto
When a Home Health Data Breach Becomes a Class Action: Legal Liability in 2026
For most of the history of HIPAA enforcement, the primary legal consequence of a home health data breach was an OCR investigation and potential civil monetary penalty. Class action litigation…
Read More#Home Healthcare Security#Compliance#cyber attack
Cybersecurity
7/20/20264 min read
By Obi Ibeto
Third-Party Risk Assessment for Home Health: A Practical Vendor Scorecard
Not all vendor risks are equal. Here is a tiered vendor scorecard for home health agencies — allocating scrutiny proportional to each vendor's level of ePHI access.
Read More#Home Health#Compliance#HIPAA Compliance
Cybersecurity
7/3/20263 min read
Cybersecurity for Home Health Staffing Agencies: Protecting Temporary Worker Data
Home health staffing agencies act as both covered entities and business associates — creating HIPAA complexity that standard frameworks do not address. Here is the right security approach.
Read More#staffing agencies#home health#HIPAA compliance
Cybersecurity
7/3/20264 min read
How to Write a HIPAA-Compliant Remote Access Policy for Home Health Field Staff
A remote access policy is both an OCR requirement and a practical security control. Here is how to write one that actually works for a distributed home health workforce.
Read More#remote access policy#HIPAA compliance#home health
Cybersecurity
7/2/20263 min read
Why Cyber Insurance Claims Get Denied: What Home Health Agencies Must Document
Cyber insurance claim denial rates in healthcare are rising. Here is why claims fail — and the documentation home health agencies must maintain to win claims when it matters most.
Read More#cyber insurance#home health#HIPAA compliance
Cybersecurity
7/2/20263 min read
The HIPAA Minimum Necessary Standard: What It Means for Home Health Data Access
The HIPAA minimum necessary standard is among OCR's most-cited violations. Here is what it means for EHR configuration and access policy at home health agencies.
Read More#HIPAA minimum necessary#home health#HIPAA compliance
Cybersecurity
7/2/20263 min read
HIPAA and Texting: Can Home Health Staff Text Patient Information?
Most home health staff text patient information daily. Here is what HIPAA says about texting, what is and is not permitted, and how to build a compliant messaging policy your team will follow.
Read More#HIPAA texting#home health#HIPAA compliance
Cybersecurity
7/1/20263 min read
Matrixcare Security for Home Health: Closing the HIPAA Gap Around Your EHR
Matrixcare secures its platform — not your endpoints, email, or staff behavior. Here is the security layer your agency must add to complete a HIPAA-compliant architecture around Matrixcare.
Read More#Matrixcare#home health security#HIPAA compliance
Cybersecurity
7/1/20264 min read
WellSky Security for Home Health Agencies: The HIPAA Layer WellSky Does Not Include
WellSky secures its application — but your devices, email, and networks are outside that boundary. Here is what every WellSky-using home health agency must build around the platform.
Read More#WellSky#home health#HIPAA compliance
Cybersecurity
7/1/20263 min read
Homecare Homebase Security: The HIPAA Controls HCHB Does Not Cover
Homecare Homebase secures its application — but everything outside that boundary is your agency's responsibility. Here is the complete security layer every HCHB agency must build.
Read More#Homecare Homebase#home health security#HIPAA compliance
Cybersecurity
6/30/20264 min read
HIPAA and Remote Work: Securing Home Health Administrative Staff Working From Home
Remote administrative staff access billing, scheduling, and EHR systems from home networks on personal devices. Here is the HIPAA security framework for home-based administrative roles.
Read More#remote work#HIPAA compliance#home health
Cybersecurity
6/30/20264 min read
How to Run a HIPAA Security Tabletop Exercise at Your Home Health Agency
A 90-minute tabletop exercise reveals incident response gaps before a real attack exposes them. Here is how to run a realistic tabletop exercise for a home health agency leadership team.
Read More#tabletop exercise#incident response#home health
Cybersecurity
6/30/20263 min read
Access Control Reviews for Home Health Agencies: Who Has Access to What and Why It Matters
Excessive permissions amplify breach damage. Here is how to conduct a HIPAA-required access review — and what to do about the excessive permissions most home health agencies discover.
Read More#access control#home health#HIPAA compliance
Cybersecurity
6/29/20264 min read
How to Respond to a Phishing Email at Your Home Health Agency: The 6-Step Staff Protocol
Most home health staff do not know what to do after clicking a suspicious link. Here is the 6-step protocol every staff member should follow — and how to train your team on it.
Read More#phishing#home health#incident response
Cybersecurity
6/29/20263 min read
What Is a SOC 2 Report and Why Should Home Health Agencies Ask Vendors for One?
SOC 2 Type 2 is the most meaningful vendor security credential. Here is what these reports contain, how to read them, and which home health vendors should be providing one.
Read More#SOC 2#vendor security#home health
Cybersecurity
6/29/20264 min read
Home Health EHR Security Compared: Matrixcare, WellSky, Axxess, and Homecare Homebase
Not all home health EHRs carry equal security. This HIPAA-focused comparison of Matrixcare, WellSky, Axxess, and HCHB covers what each provides — and what your agency must add.
Read More#home health#EHR security#Matrixcare
Cybersecurity
6/26/20263 min read
HIPAA Sanctions Policy for Home Health Agencies: What You Need and Why It Matters
HIPAA requires a documented sanctions policy for workforce members who violate privacy or security rules. Here is what it must include and how to apply it consistently.
Read More#HIPAA sanctions policy#home health#HIPAA compliance
Cybersecurity
6/26/20264 min read
Business Continuity Planning for Home Health Agencies: Keeping Care Running During a Cyberattack
A cyberattack does not pause patient care. Here is how home health agencies build continuity plans that keep nurses visiting patients during a cyber incident.
Read More#business continuity#home health#cyberattack
Cybersecurity
6/25/20264 min read
Password Security for Home Health Staff: Moving Beyond Passwords to Passkeys
Password reuse is the top credential vulnerability in home healthcare. Here is the staged path from weak passwords to password managers to passkeys — and what each step means for HIPAA compliance.
Read More#password security#passkeys#home health
Cybersecurity
6/25/20264 min read
Physical Security for Home Health Agencies: The HIPAA Risks Inside Your Office and in the Field
HIPAA physical safeguards cover your office, server room, and field staff in patient homes. Here is where home health agencies most commonly fail physical security reviews.
Read More#physical security#home health#HIPAA compliance
Cybersecurity
6/24/20265 min read
Cloud Security for Home Health Agencies: Locking Down Microsoft 365 and Google Workspace
Most home health agencies run on Microsoft 365 or Google Workspace with default configurations that leave critical HIPAA gaps. Here are the mandatory settings every agency must configure.
Read More#cloud security#home health#Microsoft 365
Cybersecurity
6/24/20264 min read
Patch Management for Home Health Agencies: The Security Practice Nobody Talks About
Unpatched software is the second most exploited attack vector in healthcare. Here is how home health agencies implement automated patch management without disrupting care workflows.
Read More#patch management#home health#HIPAA compliance
Cybersecurity
6/22/20263 min read
By Obi Ibeto
Multi Factor Authentication For Home Health Why Sms Codes Are No Longer Enough
The 2026 HIPAA Security Rule mandates MFA for all ePHI access. Not all MFA is equal — here is why SMS codes fall short, what stronger options exist, and how to deploy them to field staff.
Read More#home health#, Home Health#, Technical Guide
Cybersecurity
6/22/20263 min read
By Obi Ibeto
How Home Health Agencies Can Achieve Hitrust Certification A Step By Step Roadmap
HITRUST is becoming a hospital-referral differentiator for home health agencies. Here is the step-by-step roadmap from HIPAA compliance to HITRUST e1 certification.
Read More#home health
Cybersecurity
6/21/20263 min read
By Obi Ibeto
Hipaa Breach Notification A Step By Step Guide For Home Health Agencies
A confirmed data breach triggers strict notification obligations within 60 days, 72 hours, and immediately. Here is exactly what home health agencies must do to stay HIPAA compliant. This incident response guide complements the proactive approach outlined in: <a href="/blog/hipaa-security-risk-assessment-home-health-agency-guide" title="HIPAA Risk Analysis & Assessment: Complete Step-by-Step Guide for Home Health Agencies">HIPAA Risk Analysis & Assessment: Complete Step-by-Step Guide for Home Health Agencies</a>
Read More#home health#breach notification
Cybersecurity
6/21/20264 min read
By Obi Ibeto
How Home Health Agencies Can Win More Hospital Referrals With Cybersecurity Certification
Hospital discharge planners increasingly prefer home health agencies that can demonstrate cybersecurity compliance. Here's how a strong security posture becomes a competitive advantage for referrals.
Read More#home health#hospital referrals#competitive advantage
HIPAA & Compliance
6/19/20264 min read
HIPAA Security Rule 2026: The Complete Compliance Checklist and Implementation Guide for Home Health Agencies
Complete HIPAA Security Rule 2026 compliance checklist for home health agencies, including mandatory updates, foundational cybersecurity guidance, and step-by-step implementation strategies for all administrative, technical, and physical safeguards.
Read More#hipaa#compliance#home health
Cybersecurity
6/17/20262 min read
By Obi Ibeto
Email Security for Home Health Agencies: Stopping the #1 HIPAA Breach Vector
Phishing email drives the majority of home health data breaches. Here is the layered email security approach that stops credential theft, domain impersonation, and BEC attacks.
Read More#email#security#home
Cybersecurity
6/17/20262 min read
By Obi Ibeto
Cyber Insurance for Home Health Agencies: What Carriers Now Require and How to Qualify
Cyber insurance underwriters are tightening requirements for home health agencies. Here is what carriers now demand — and how to qualify for maximum coverage at the best premium.
Read More#cyber#insurance#home
Cybersecurity
6/17/20264 min read
By Obi Ibeto
2026 Home Health Cybersecurity Threat Report: What Attacks Are Actually Happening
Ransomware, BEC, and credential theft dominate the 2026 home health threat landscape. Here is current attack data on frequency, cost, targets, and what controls stop each threat type.
Read More#home health cybersecurity#ransomware#business email compromise
Cybersecurity
6/14/20263 min read
By Obi Ibeto
Medicaid Managed Care and Cybersecurity: What NY Home Health Agencies Must Know
New York Medicaid managed care organizations are adding cybersecurity requirements to provider agreements. Here's what NY home health agencies must demonstrate to maintain managed care contracts. <strong>Related Requirements for Agencies in Both Programs:</strong> <a href="/blog/cms-conditions-of-participation-home-health-cybersecurity-medicare-2026" title="Medicare guide">Medicare guide</a>
Read More#New York Medicaid#managed care cybersecurity#home health cybersecurity
Cybersecurity
6/14/20265 min read
By Obi Ibeto
Incident Response for Home Health Agencies: The First 24 Hours
The first 24 hours of a cybersecurity incident determine whether your home health agency pays a ransom, notifies patients, and faces OCR — or contains the damage and recovers clean. <p><strong>Quick start: Need immediate action steps?:</strong> See our <a href="/blog/incident-response-home-health-agency-first-hour-playbook">First-Hour Incident Response Playbook</a>.</p>
Read More#incident response#home health cybersecurity#ransomware
Cybersecurity
6/14/20264 min read
By Obi Ibeto
The ShieldForce Advantage: Why Purpose-Built Healthcare Cybersecurity Beats Generic IT Security
Generic IT security doesn't understand HIPAA, SHIN-NY, or how home health agencies actually work. Here's why purpose-built healthcare cybersecurity delivers better protection and better compliance outcomes.
Read More#purpose-built healthcare cybersecurity#managed security services#HIPAA compliance
Cybersecurity
6/14/20263 min read
By Obi Ibeto
Cybersecurity for Home Health Agencies During a State Survey: What Surveyors Look For
State health department surveyors are increasingly reviewing cybersecurity documentation during home health agency surveys. Here's exactly what they look for and how to be prepared.
Read More#state survey#home health cybersecurity#HIPAA compliance
Cybersecurity
6/14/20264 min read
By Obi Ibeto
Cybersecurity Due Diligence When Acquiring or Merging Home Health Agencies
Home health agency acquisitions create hidden cybersecurity liability. Here's the cyber due diligence checklist every buyer needs before closing a deal.
Read More#cybersecurity due diligence#M&A cybersecurity#home health acquisition
Cybersecurity
6/14/20264 min read
By Obi Ibeto
Protecting Pediatric Home Health Patients: Why Children's Health Data Requires Extra Security
Pediatric home health patients face unique privacy risks — their health data has a decades-long exposure window. Here's what extra security and HIPAA protections are required for agencies serving children.
Read More#pediatric home health#children's health data#HIPAA compliance
Cybersecurity
6/13/20264 min read
By Obi Ibeto
Security Awareness Training That Actually Works for Home Health Care Teams
Generic security training doesn't work for home health care teams who learn on mobile devices between patient visits. Here's how to design training that sticks and satisfies HIPAA.
Read More#security awareness training#home health cybersecurity#HIPAA compliance
Cybersecurity
6/13/20264 min read
By Obi Ibeto
Supply Chain Cybersecurity for Home Health: Why Your Vendors Are Your Biggest Blind Spot
Home health agencies focus on their own security — but vendor breaches are now the leading cause of healthcare data exposure. Here's how to manage third-party cyber risk in 2026.
Read More#supply chain cybersecurity#vendor risk management#third-party risk
Cybersecurity
6/13/20264 min read
By Obi Ibeto
The Home Health Cybersecurity Buyer's Guide: How to Evaluate Managed Security Providers in 2026
Choosing a managed security provider for your home health agency is a high-stakes decision. Here's the complete evaluation framework — what to ask, what to avoid, and what separates specialists from generalists.
Read More#home health cybersecurity#managed security services#HIPAA compliance
HIPAA & Compliance
6/10/20265 min read
By Obi Ibeto
HIPAA Risk Analysis & Assessment: Complete Step-by-Step Guide for Home Health Agencies
Complete guide to HIPAA's risk management process covering both risk analysis (identifying threats and vulnerabilities) and risk assessment (prioritizing them) with step-by-step instructions, examples from home health environments, and templates for documentation. After completing your risk assessment, ensure you have a breach response plan ready. See: <a href="/blog/hipaa-breach-notification" title="Hipaa Breach Notification A Step By Step Guide For Home Health Agencies">Hipaa Breach Notification A Step By Step Guide For Home Health Agencies</a>
Read More#HIPAA#risk assessment#home healthcare
HIPAA & Compliance
6/10/20264 min read
By Obi Ibeto
HIPAA-Compliant Telehealth: Securing Remote Patient Visits for Home Health Agencies
Telehealth visits by home health agencies create specific HIPAA security obligations. Here's how to secure video visits, remote monitoring data, and digital patient communication in 2026.
Read More#HIPAA#telehealth#home healthcare
Cybersecurity
6/10/20264 min read
By Obi Ibeto
Network Segmentation for Home Health Agencies: Why Your Office WiFi and EHR Should Never Share a Network
Home health agencies that run clinical systems and guest WiFi on the same network are one compromised device away from a full breach. Here's what network segmentation is and how to implement it.
Read More#network segmentation#home healthcare#HIPAA
Cybersecurity
6/10/20264 min read
By Obi Ibeto
Social Engineering Attacks Targeting Home Health Scheduling Staff: What to Watch For in 2026
Home health scheduling departments are a prime target for social engineering. Attackers impersonate patients, families, physicians, and Medicare officials to extract information and gain system access.
Read More#social engineering#home healthcare#scheduling security
Cybersecurity
6/9/20264 min read
By Obi Ibeto
SOC 2 vs. HIPAA: What Home Health Agencies Need to Know About the Difference
SOC 2 and HIPAA are both security frameworks — but they serve different purposes. Home health agencies need to understand both when evaluating technology vendors and cybersecurity providers.
Read More#SOC 2#HIPAA#home health
Ransomware Readiness
6/9/20264 min read
By Obi Ibeto
How Hackers Compromise Home Health EHR Systems: The Attack Playbook Exposed
Ransomware groups have a specific playbook for compromising home health EHR systems. Understanding how attacks unfold is the first step to stopping them.
Read More#ransomware#EHR security#home health
HIPAA & Compliance
6/8/20264 min read
By Obi Ibeto
Cybersecurity for Home Health Billing Companies: The Hidden Attack Surface
Third-party billing companies that handle home health claims are a major HIPAA compliance risk. Here's what agencies must know about securing the billing relationship.
Read More#HIPAA#billing company#business associate agreement
Cybersecurity
6/6/20264 min read
By Obi Ibeto
FQHC Telehealth Security: How to Protect Patient Data in Virtual Visits
FQHCs using telehealth platforms for virtual visits face unique HIPAA risks. Here's how to secure telehealth for community health centers without disrupting care delivery.
Read More#FQHC#telehealth#HIPAA
Cybersecurity
6/6/20263 min read
By Obi Ibeto
Cybersecurity for Pediatric Hospice: Protecting the Most Sensitive PHI in Healthcare
Pediatric hospice patients are minors with terminal diagnoses — their records require heightened security and privacy protections beyond standard HIPAA requirements. Here's what pediatric hospice agencies must do.
Read More#pediatric hospice#hospice cybersecurity#HIPAA
HIPAA & Compliance
6/6/20264 min read
By Obi Ibeto
HIPAA and AI: What Home Health Agencies Need to Know About Using AI Tools Safely
AI tools like ChatGPT and Microsoft Copilot are entering home health agencies. Here's what HIPAA requires before any AI tool can touch patient data — and what the risks are.
Read More#HIPAA#AI#home health
Cybersecurity
6/6/20263 min read
By Obi Ibeto
Volunteer Data Security in Hospice Organizations: An Overlooked HIPAA Risk
Hospice volunteers who access patient scheduling, names, and contact information are handling PHI and are frequently left out of HIPAA security programs. Here's how to fix that.
Read More#hospice#volunteers#HIPAA
Cybersecurity
6/6/20264 min read
By Obi Ibeto
How Community Health Centers Can Afford Enterprise Cybersecurity on a Safety-Net Budget
FQHCs don't have hospital IT budgets — but they face the same cybersecurity threats. Here's how community health centers access enterprise-grade protection within safety-net financial constraints.
Read More#community health#FQHC#cybersecurity
SHIN-NY Readiness
6/4/20263 min read
By Obi Ibeto
How to Present SHIN-NY Compliance Progress to Your Board of Directors
Home health agency boards are increasingly expected to oversee cybersecurity posture. Here's how to present SHIN-NY compliance progress to your board in terms they understand and can act on.
Read More#SHIN-NY#compliance#board governance
SHIN-NY Readiness
6/4/20265 min read
By Obi Ibeto
SHIN-NY RHIO Comparison: Hixny vs. Rochester RHIO vs. HealtheConnections vs. Healthix
New York's four RHIOs — Hixny, Rochester RHIO, HealtheConnections, and Healthix — each have specific SHIN-NY compliance processes. Here's what home health agencies need to know about each one.
Read More#SHIN-NY#RHIO#Hixny
SHIN-NY Readiness
6/4/20264 min read
By Obi Ibeto
SHIN-NY Compliance for Small NY Home Health Agencies Under 25 Staff
SHIN-NY cybersecurity requirements apply to home health agencies of every size. Here's a right-sized compliance approach for small New York home health agencies with under 25 staff and no IT department.
Read More#SHIN-NY#compliance#home health
Cybersecurity
6/4/20263 min read
By Obi Ibeto
Securing Axxess for Hospice Agencies: Beyond the Platform's Built-In Security
Axxess is a widely used hospice software platform — but its security doesn't extend to your devices, networks, or staff behavior. Here's the security layer your hospice agency must build around Axxess.
Read More#hospice#Axxess#HIPAA
SHIN-NY Readiness
6/4/20264 min read
By Obi Ibeto
How to Write a SHIN-NY Incident Response Plan Your RHIO Will Accept
Your SHIN-NY CSPP must include an incident response plan — and your RHIO reviews it. Here's what to include to write a plan that satisfies RHIO requirements and actually works when you need it.
Read More#SHIN-NY#incident response#RHIO
Cybersecurity
6/3/20265 min read
By Obi Ibeto
The Hidden Cost of Cheap Cybersecurity for Home Health Agencies
Cheap cybersecurity tools leave home health agencies exposed to HIPAA violations, ransomware, and six-figure breach costs. Here is the real price of cutting corners on security.
Read More#Home Healthcare Security#Cybersecurity ROI#HIPAA Compliance
Cybersecurity
6/3/20264 min read
By Obi Ibeto
HIPAA Penalties in 2026: What Home Health Agencies Are Actually Being Fined For
OCR HIPAA penalties are accelerating in 2026. Here's what home health agencies are actually being penalized for and the specific documentation gaps that trigger six-figure fines.
Read More#Home Healthcare Security#HIPAA Compliance#OCR Enforcement
Cybersecurity
6/3/20264 min read
By Obi Ibeto
AI Threats to Healthcare: How Deepfake Voice Attacks Are Targeting Home Health Billing Departments
AI-generated voice cloning attacks are now reaching home health billing departments, impersonating physicians, Medicare officials, and executives to authorize fraudulent transfers.
Read More#Home Healthcare Security#Threat Intelligence#AI Security
Cybersecurity
6/3/20263 min read
By Obi Ibeto
Managed Detection and Response (MDR) for Home Health: What It Is and Why It Beats Antivirus
Managed Detection and Response goes far beyond antivirus for home health agencies, providing 24/7 human-monitored threat detection and active response. Here's what it is and what it costs.
Read More#Home Healthcare Security#MDR#Endpoint Detection and Response
Cybersecurity
6/3/20264 min read
By Obi Ibeto
Securing PointClickCare for Home Health Agencies: The Security Layer HHAs Must Add
PointClickCare is widely used in home health and post-acute care, but its security doesn't cover your devices, networks, or staff. Here's what your agency must add to stay HIPAA-compliant.
Read More#Home Healthcare Security#PointClickCare Security#HIPAA Compliance
Cybersecurity
6/2/20264 min read
By Obi Ibeto
FQHC Cybersecurity Budget Guide: How to Fund HIPAA Compliance Through Section 330 Grants
Cybersecurity is an allowable cost under Section 330 HRSA grants for FQHCs. Here's how to budget, justify, and fund HIPAA-required cybersecurity controls as part of your health center's grant program.
Read More#FQHC#cybersecurity#budget
Cybersecurity
6/2/20264 min read
By Obi Ibeto
Dark Web Monitoring for Home Health Agencies: Is Your Patient Data Already Compromised?
Stolen home health credentials and patient data are actively sold on dark web forums. Here's how dark web monitoring works, what it finds, and why every home health agency needs it in 2026.
Read More#home healthcare security#dark web monitoring#HIPAA compliance
Cybersecurity
6/2/20265 min read
By Obi Ibeto
How to Pass a HIPAA Security Audit: A Home Health Agency Preparation Guide
HIPAA Security Rule audits are increasing in 2026. Here's exactly how home health agencies should prepare — with the documents, controls, and evidence OCR investigators look for first.
Read More#home healthcare security#HIPAA compliance#HIPAA audit
Cybersecurity
6/2/20264 min read
By Obi Ibeto
What the 2025 United Health Group Breach Means for Every Home Health Agency
The UnitedHealth Group breach exposed 190 million Americans. Here's what it means for home health agencies — including increased phishing risk, supply chain exposure, and patient notification obligations.
Read More#home healthcare security#UnitedHealth breach#Change Healthcare
Cybersecurity
6/2/20265 min read
By Obi Ibeto
Zero Trust Security for Home Health Agencies: Complete Implementation Guide
Complete guide to Zero Trust security for home health agencies, explaining the framework, implementation strategies, and why it matters for protecting patient data in distributed healthcare environments.
Read More#home healthcare security#zero trust#HIPAA compliance
Cybersecurity
6/2/20264 min read
By Obi Ibeto
FQHCs Are the Most Under-Defended Target in Healthcare Cybersecurity. Here's the Evidence.
Federally Qualified Health Centers face the same ransomware and phishing threats as hospitals but with a fraction of the security resources. Here's the data — and what FQHCs must do in 2026.
Read More#FQHC#ransomware#cybersecurity
Cybersecurity
6/2/20264 min read
By Obi Ibeto
MFA Is Now Mandatory for Every System Accessing ePHI: What This Means for FQHC Staff Workflows
The 2026 HIPAA Security Rule update makes MFA mandatory for all ePHI access at FQHCs. Here's how to implement it across a diverse community health center workforce without disrupting clinical operations.
Read More#FQHC#MFA#HIPAA
Cybersecurity
6/2/20264 min read
By Obi Ibeto
HRSA Site Visit Prep: The Cybersecurity Documentation Auditors Check First at Community Health Centers
HRSA site reviewers increasingly assess health information security as part of health center compliance reviews. Here's the cybersecurity documentation your FQHC must have ready before a visit.
Read More#HRSA#FQHC#cybersecurity
Cybersecurity
6/2/20265 min read
By Obi Ibeto
Disaster Recovery Planning for Home Health Agencies: Beyond the Backup
A backup is not a disaster recovery plan. Home health agencies need documented, tested recovery procedures that keep patient care running during a cybersecurity incident or technology failure.
Read More#home healthcare security#disaster recovery#HIPAA compliance
Cybersecurity
6/2/20265 min read
By Obi Ibeto
42 CFR Part 2 + HIPAA: What Community Health Centers Serving Substance Use Patients Must Protect
FQHCs serving patients with substance use disorders face a dual privacy framework — HIPAA and 42 CFR Part 2. Here's what each requires and how to build a cybersecurity program that protects both.
Read More#42 CFR Part 2#HIPAA#FQHC
Cybersecurity
6/1/20265 min read
By Obi Ibeto
The 2026 HIPAA Security Rule for FQHCs: What HRSA Grant Conditions Now Require
The 2026 HIPAA Security Rule update creates mandatory cybersecurity requirements for FQHCs — and HRSA grant conditions increasingly align with these standards. Here's what your health center must have.
Read More#FQHC#HIPAA#HRSA
Cybersecurity
6/1/20265 min read
By Obi Ibeto
Multi-Site HIPAA Compliance for Community Health Centers: How to Manage 10 Locations Without 10 IT Teams
Multi-site FQHCs face amplified cybersecurity complexity — each site is an additional attack surface. Here's how to manage HIPAA compliance across multiple locations without proportional IT headcount.
Read More#FQHC#HIPAA#multi-site
Cybersecurity
6/1/20264 min read
By Obi Ibeto
The Hospice HIPAA Audit Checklist: What CMS Surveyors and OCR Investigators Ask for First
When CMS surveyors or OCR investigators visit your hospice, these are the documents and controls they request first. Use this checklist to ensure your agency is prepared.
Read More#hospice#HIPAA#audit
Ransomware Readiness
6/1/20264 min read
By Obi Ibeto
When the Cherry Street Ransomware Hit 182,000 Patients: What Every FQHC Should Learn From It
The Cherry Street Health Services ransomware attack exposed 182,000 patients at a Michigan FQHC. Here are the specific security failures that made it possible — and what every community health center must do differently.
Read More#ransomware#FQHC#community health
Cybersecurity
5/28/20265 min read
By Obi Ibeto
From Zero to HIPAA-Ready: A 90-Day Cybersecurity Roadmap for Home Health Agencies Without IT Staff
A practical, week-by-week 90-day roadmap for home health agencies with no IT department to achieve HIPAA-ready cybersecurity — covering the 2026 Security Rule update requirements.
Read More#Home Health#HIPAA#Cybersecurity
Cybersecurity
5/28/20264 min read
By Obi Ibeto
Personal Devices on Home Wi-Fi: The Security Gap Killing HIPAA Compliance for Home Health Agencies
When field nurses access patient records from personal devices on home Wi-Fi networks, it creates HIPAA compliance gaps that most agencies haven't addressed. Here's how to close them without disrupting care delivery.
Read More#Home Health#Cybersecurity#HIPAA
Cybersecurity
5/28/20264 min read
By Obi Ibeto
How a Hospice Agency Survived a 2am Ransomware Attack Without Paying the Ransom
A composite case study of how a ShieldForce-protected hospice agency detected and recovered from a ransomware attack without paying, without losing patient data, and without disrupting care delivery.
Read More#Hospice#Ransomware#Cybersecurity
SHIN-NY Readiness
5/28/20264 min read
By Obi Ibeto
How New York's Cybersecurity Regulations Compare to Other States: What Home Health Agencies in MA, VT, NH, and NJ Should Know
New York has the most complex cybersecurity compliance stack for home health agencies. Here's how SHIN-NY and the SHIELD Act compare to what Massachusetts, Vermont, New Hampshire, and New Jersey require.
Read More#SHIN-NY#HIPAA#Home Health
Cybersecurity
5/28/20264 min read
By Obi Ibeto
What Does a HIPAA Breach Actually Cost a Home Health Agency? (Real Numbers, 2026)
The real cost of a HIPAA breach for a home health agency goes far beyond the OCR fine. Here is a complete breakdown of financial exposure — from forensic investigations to lost revenue — with 2026 figures.
Read More#Home Health#HIPAA#Data Protection
Cybersecurity
5/28/20264 min read
By Obi Ibeto
Ransomware During an Active Patient Census: Why Hospice Agencies Are a High-Value Target in 2026
Hospice agencies are among healthcare's most targeted ransomware victims — and the consequences go beyond data. Here's why attackers target hospice specifically and what meaningful protection looks like.
Read More#Hospice#Ransomware#Cybersecurity
SHIN-NY Readiness
5/28/20265 min read
By Obi Ibeto
How to Choose a Cybersecurity Provider for Your Home Healthcare Agency: 10 Questions to Ask
Choosing the wrong cybersecurity provider for your home health agency can leave you exposed. These 10 questions separate healthcare-specialized MSSPs from generic IT vendors.
Read More#SHIN-NY#Home Health#HIPAA
Cybersecurity
5/27/20264 min read
By Obi Ibeto
End-of-Life Data: Why Hospice Patient Records Are Among the Most Sensitive PHI in Healthcare
Hospice patient records contain irreplaceable, deeply personal information — terminal diagnoses, advance directives, family dynamics. Here's why this data requires exceptional protection and what that means for your security program.
Read More#Hospice#Data Protection#HIPAA
Cybersecurity
5/27/20264 min read
By Obi Ibeto
What Hospice Agencies Need to Know About the 2026 HIPAA Security Rule Update
The 2026 HIPAA Security Rule update changes several requirements from \"addressable\" to mandatory — with direct implications for hospice agencies. Here's what changed and what your agency must do. <strong>Related HIPAA 2026 Update Guide for Other Vertical:</strong> <a href="/blog/2026-hipaa-security-rule-home-healthcare-agencies" title="Home Healthcare version">Home Healthcare version</a>
Read More#Hospice#HIPAA#Cybersecurity
Cybersecurity
5/27/20264 min read
By Obi Ibeto
Remote Wipe, Device Policies, and Lost Devices: A Practical Guide for Hospice Field Staff
Hospice field staff frequently work with devices containing sensitive patient data in patient homes and community settings. Here's how to build a practical device security policy that works in the field.
Read More#Hospice#Cybersecurity#Backup & Recovery
Cybersecurity
5/27/20264 min read
By Obi Ibeto
Securing Netsmart myUnity: What Hospice Agencies Need Beyond the EHR Vendor's Defaults
Netsmart myUnity is a leading hospice EHR — but vendor security doesn't cover your devices, networks, or staff behavior. Here's what hospice agencies must add to be HIPAA-compliant.
Read More#Hospice#Cybersecurity#HIPAA
Cybersecurity
5/27/20264 min read
By Obi Ibeto
What Cyber Insurance Carriers Require Before Covering Your Hospice Agency in 2026
Hospice agencies face tightening cyber insurance underwriting in 2026. Here's exactly what controls carriers require — and what misrepresentation on your application means for your coverage.
Read More#Hospice#Cyber Insurance#Cybersecurity
SHIN-NY Readiness
5/27/20264 min read
By Obi Ibeto
SHIN-NY Workforce Training Requirements: What Your Nurses and Aides Need to Know About Cybersecurity
SHIN-NY requires documented security awareness training for all workforce members with access to health information exchange data. Here's what the training must cover and how to make it practical for field staff.
Read More#SHIN-NY#HIPAA#Home Health
SHIN-NY Readiness
5/27/20265 min read
By Obi Ibeto
NY SHIELD Act + SHIN-NY + 2026 HIPAA Rule: Navigating Three Cybersecurity Compliance Layers at Once
New York home health agencies face three overlapping cybersecurity frameworks simultaneously: HIPAA, SHIN-NY, and the NY SHIELD Act. Here's how they interact and how to build one program that satisfies all three.
Read More#SHIN-NY#Compliance#HIPAA
SHIN-NY Readiness
5/27/20264 min read
By Obi Ibeto
SHIN-NY Security Breach Notification Requirements: What You Must Report and When
A confirmed breach affecting SHIN-NY data triggers specific notification obligations to your RHIO, OCR, and potentially affected individuals. Here's the exact timeline and process for NY home health agencies.
Read More#SHIN-NY#HIPAA#Compliance
Cybersecurity
5/27/20264 min read
By Obi Ibeto
CMS Conditions of Participation and Cybersecurity: What Hospice Agencies Must Document Before a Survey
CMS Conditions of Participation don't explicitly list cybersecurity — but surveyors increasingly cite inadequate data protection as a deficiency. Here's what hospice agencies must document to pass a survey in 2026.
Read More#Hospice#Cybersecurity#Partnerships
Cybersecurity
5/27/20264 min read
By Obi Ibeto
Securing Brightree for Hospice Agencies: Closing the Security Gaps the Platform Doesn't Cover
Brightree is a widely used hospice EHR, but vendor security doesn't protect your devices, networks, or staff. Here's the security layer your hospice agency must build around Brightree.
Read More#Hospice#Cybersecurity#HIPAA
SHIN-NY Readiness
5/26/20263 min read
By Obi Ibeto
SHIN-NY Audit Log Requirements: What You Need to Track and How to Prove It
SHIN-NY requires audit logs for all access to health information exchange data — with specific retention, review, and documentation obligations. Here's exactly what your New York home health agency needs.
Read More#SHIN-NY#Compliance#HIPAA
SHIN-NY Readiness
5/26/20264 min read
By Obi Ibeto
What Is a CSPP Document and Why SHIN-NY Requires One
The SHIN-NY Cybersecurity Policies and Procedures Program (CSPP) is the foundational compliance document for every New York home health agency participating in SHIN-NY. Here's what it contains, why it matters, and how to build one.
Read More#SHIN-NY#Cybersecurity#Compliance
Cybersecurity
5/26/20266 min read
By Obi Ibeto
Ransomware at 2am: What Actually Happens to a Home Health Agency That Gets Hit
A ransomware attack on a home health agency doesn't just lock files — it stops care. Here's the real sequence of events when attackers strike, and what protection looks like before, during, and after.
Read More#Home Health#Ransomware#HIPAA
SHIN-NY Readiness
5/25/20264 min read
By Obi Ibeto
How Much Does SHIN-NY Compliance Cost? A Realistic Budget Guide for NY Home Health Agencies
SHIN-NY compliance has real costs — but so does non-compliance. This guide breaks down the realistic budget for a New York home health agency to achieve and maintain SHIN-NY cybersecurity requirements in 2026.
Read More#SHIN-NY#HIPAA#Compliance
SHIN-NY Readiness
5/22/20263 min read
By Obi Ibeto
The $50,000 Fine: What Happens to NY Home Health Agencies That Fail SHIN-NY Cybersecurity Compliance
Non-compliance with SHIN-NY cybersecurity requirements carries real consequences — from RHIO suspension to HIPAA penalties. Here's what enforcement actually looks like for New York home health agencies.
Read More#SHIN-NY#HIPAA#Home Health
SHIN-NY Readiness
5/22/20264 min read
By Obi Ibeto
SHIN-NY vs. HIPAA: What's the Difference and Why NY Agencies Must Comply with Both
SHIN-NY and HIPAA are not the same compliance obligation. New York home healthcare agencies must satisfy both — and the requirements don't always overlap. Here's a clear, side-by-side comparison.
Read More#SHIN-NY#HIPAA#Cybersecurity
SHIN-NY Readiness
5/22/20264 min read
By Obi Ibeto
The SHIN-NY Readiness Checklist: 18 Controls Your NY Home Health Agency Must Have
A complete SHIN-NY compliance checklist for New York home health agencies — covering every CSPP requirement, technical control, and documentation obligation. Use this to assess your readiness before your RHIO review.
Read More#SHIN-NY#Home Health#Compliance
SHIN-NY Readiness
5/22/20266 min read
By Obi Ibeto
SHIN-NY Cybersecurity Requirements Explained: What Every NY Home Health Agency Must Do in 2026
SHIN-NY cybersecurity requirements are now enforceable for New York home healthcare agencies. This definitive guide explains every control, deadline, and documentation obligation — in plain English.
Read More#SHIN-NY#Home Health#HIPAA
SHIN-NY Readiness
5/21/20263 min read
By Obi Ibeto
SHIN-NY MFA Requirements: What Multi-Factor Authentication Means for Your Care Team's Daily Workflow
SHIN-NY requires MFA for all users accessing health information exchange data. Here's what that means in practice for nurses, billing staff, and administrators — and how to implement it without disrupting care.
Read More#SHIN-NY#Home Health#HIPAA
Cybersecurity
5/6/202611 min read
By Obi Ibeto
2026 HIPAA Security Rule: What Home Healthcare Agencies Need to Know
The expected 2026 HIPAA Security Rule update could raise cybersecurity expectations for home healthcare agencies. Learn how to prepare for ePHI protection, MFA, risk analysis, vendor oversight, backup, and incident response. <strong>Related HIPAA 2026 Update Guide for Other Vertical:</strong> <a href="/blog/2026-hipaa-security-rule-hospice-agency-requirements" title="Hospice version">Hospice version</a>
Read More#Home Health#HIPAA#Data Protection
Cybersecurity
5/5/202610 min read
By Obi Ibeto
19 Million Home Visits: What UnitedHealth's Scale Reveals About the Future of Home Healthcare, Cybersecurity, and Patient Trust
UnitedHealth Group delivered 19 million in-home visits in 2025. For home healthcare agencies, this signals a permanent shift in care delivery — and a rising standard for cybersecurity, HIPAA readiness, and digital resilience.
Read More#Home Health#HIPAA#Cybersecurity
Cybersecurity
4/29/20262 min read
By Obi Ibeto
Cybersecurity in Home Care: Protecting Patient Data Beyond the EMR
Home care agencies are carrying more digital responsibility than ever before. Patient records, schedules, billing information, caregiver communication, payroll, referral data, and family updates now move across multiple systems —…
Read More#Home Health#Email Security#Cybersecurity
Cybersecurity
4/11/20264 min read
Why Perimeter Security Is No Longer Enough: How Extended Detection and Response (XDR) Stops Modern Multi‑Stage Cyberattacks
Introduction: Attacks No Longer Happen in One Place Cyberattacks used to be simple. An attacker sent a malicious file, it landed on an endpoint, and antivirus software either stopped it,…
Read More#Endpoint Security#Cybersecurity#Data Protection
Cybersecurity
4/11/20266 min read
Data Loss vs Data Breach: The Importance of DLP
Not All Data Loss Comes from Hackers When organizations think about data loss, they often picture external attackers breaking into systems and stealing information. In reality, many of today’s data loss incidents are caused by non-adversarial insiders…
Read More#Compliance#Data Protection#Small Business
Email Security
4/6/20265 min read
Why Email Remains the Most Dangerous Attack Vector and How ShieldForce Advanced Email Security and MDR Stop Modern Phishing, BEC, and Identity-Based Attacks
The Inbox Is Still the Front Door Despite years of investment in cybersecurity tools; email remains the number one entry point for cyberattacks. As Phishing, Business E-mail Compromise (BEC), and malicious attachments continue to evolve...
Read More#Email Security#Microsoft 365#Cybersecurity
Cybersecurity
4/6/20266 min read
Immutable Backups for Protecting Against Silent Data Loss Beyond Retention Policies
Silent data loss often goes undetected until retention policies expire and recovery is no longer possible. This real‑world recovery scenario shows why immutable backups are essential for long‑term protection and how ShieldForce ensures data integrity beyond native platform limits...
Read More#Microsoft 365#Cybersecurity#Compliance
Cybersecurity
1/25/202610 min read
What the Canopy Health Breach Reveals About Home Health Cybersecurity — and How to Close the Same Gaps
Canopy Health detected a breach in July 2025 but did not notify patients until six months later. Every gap that extended that timeline exists at most home health agencies today. Here is the case study and the remediation
Read More#case study#thought leadership
Cybersecurity
1/25/202610 min read
Cybersecurity Beyond the Office: How ShieldForce Protects Home Health Staff Wherever They Work
Home health nurses access patient records from patient homes, vehicles, and personal devices — environments no office perimeter can protect. Here is how ShieldForce delivers consistent security across every location your staff actually works.
Read More#thought leadership#Home Healthcare Security#Compliance
Cybersecurity
1/25/202610 min read
Advanced Persistent Threats in Home Health: The Silent Attacks That Stay Hidden for Weeks
Advanced persistent threats in healthcare maintain unauthorized access for 18–21 days before striking. Here is how APTs target home health agencies specifically — and the detection architecture that stops them before detonation.
Read More#Thought Leadership#Technical Guide#Cybersecurity
Cybersecurity
1/25/202610 min read
By Obi Ibeto
Covenant Health Breach: What the 8,000-to-478,000 Scope Escalation Teaches Home Health Agencies About Breach Assessment
Covenant Health initially reported 8,000 affected individuals. Forensic review revealed 478,000. That gap is not just a larger notification list — it is a HIPAA compliance crisis. Here is what every New England home health agency must learn from it.
Read More#Compliance#Thought Leadership#case study
Cybersecurity
1/25/20269 min read
Double-Extortion Ransomware: What the Ingram Micro Attack Teaches Home Health Agencies About the New Rules of Recovery
The Ingram Micro ransomware attack demonstrated that restoring systems is no longer enough — because data was stolen before encryption. Here is what double-extortion means for home health agencies and how to defend against both threats simultaneously.
Read More#case study#Thought Leadership
Cybersecurity
1/25/20269 min read
By Obi Ibeto
How ShieldForce Reduces Cyber Risk for Home Health Agencies — Not Just Alerts
Alert-only security fails home health agencies because knowing an attack happened is not the same as stopping it. Here is how ShieldForce reduces actual cyber risk across the environments where home health breaches originate
Read More#Cybersecurity#cyber attack#risk assessment
Cybersecurity
1/25/202610 min read
By Obi Ibeto
Preventing Cyberattacks Before They Destroy Home Health Revenue: A 2026 Strategy Guide
Cyberattacks cost home health agencies $154,000–$325,000 per incident in direct losses — before VBP penalties, referral loss, and staff turnover. Here is the prevention architecture that stops attacks before financial damage occurs
Read More#Cybersecurity#Thought Leadership#Revenue Protection
Cybersecurity
1/25/20269 min read
By Obi Ibeto
Immutable Backup for Home Health Agencies: Why Ransomware Recovery Is Only Half the Story
Most home health agencies think about immutable backup as ransomware defense. Silent data corruption — corrupted backups discovered weeks after the damage — is the threat most backup strategies miss entirely.
Read More#Compliance#Data Protection#Backup & Recovery
Cybersecurity
1/8/202610 min read
By Enoch Daniel
The MFA Attack That Uses Microsoft's Own Website Against You: OAuth Device Code Abuse in Home Health
A new phishing technique active since September 2025 bypasses MFA without stealing passwords — by tricking users into entering a code on Microsoft's real website. Here is how it works, why home health staff are prime targets, and how to stop it.
Read More#Technical Guide#Thought Leadership
Cybersecurity
12/26/20259 min read
By Enoch Daniel
Behavioral EDR for Home Health Agencies: Why Standard Antivirus Leaves Your Field Staff Unprotected
Home health field nurses work across patient homes, vehicles, and personal devices — environments that standard antivirus cannot protect. Here is why behavioral EDR is the 2026 HIPAA mandatory standard and what it means for agencies with distributed clinical workforces
Read More#EDR#Endpoint Detection and Response#Technical Guide
Cybersecurity
12/26/202511 min read
By Enoch Daniel
First-Hour Incident Response for Home Health Agencies: The Playbook That Determines Your Outcome
The first 60 minutes after a cyber incident at a home health agency determines downtime length, breach scope, regulatory exposure, and referral partner trust. Here is the six-step first-hour playbook that converts chaos into a controlled, documented response. <p><strong>Extended timeline: For post-incident strategic decisions (hours 4-24):</strong> See our <a href="/blog/incident-response-home-health-agency-first-24-hours">comprehensive 24-hour response guide</a>.</p>
Read More#Compliance Guide#Compliance#Technical Guide
Cybersecurity
12/26/202510 min read
Disaster Recovery for Home Health Agencies: A Backup You Have Never Tested Is Not a Backup
Most home health agencies believe their backups work because the software reports success. Here is what actually determines whether you can recover — and the two healthcare case studies that prove why it matters.
Read More#Home Health#Backup & Recovery#Compliance
Cybersecurity
12/26/20258 min read
By Enoch Daniel
Privacy by Design in Home Health: Embedding Patient Data Protection Into Every Clinical Workflow
Home health agencies that bolt privacy controls onto existing workflows consistently face the same compliance gaps. Here is how privacy by design — embedding protection into clinical operations from the start — produces better HIPAA outcomes with less staff friction
Read More#Home Health#Data Protection#Compliance
Email Security
12/26/202510 min read
By Enoch Daniel
Email Security for Home Health Nurses and Admins: How to Stop Phishing Before It Becomes a HIPAA Breach
Home health email inboxes receive physician orders, payer updates, and EHR notifications from dozens of external partners daily — making them the most targeted attack surface in your agency. Here is how to protect nurses and admins without disrupting care
Read More#Email Security#Cybersecurity#BEC attacks
Cybersecurity
12/26/20257 min read
Hardening Your EMR: Patching, Segmentation, and Endpoint Defense
Your EMR is the clinical heartbeat capturing orders, charting, history, billing, and coordination with partners. That centrality and the sensitive data it holds make EMR platforms a prime target. An exploit, misconfiguration, or credential compromise can ripple across visits, documentation, and patient trust...
Read More#Endpoint Security#Data Protection#Cybersecurity
Cybersecurity
12/9/20257 min read
Email Security Should Be a Priority for Every Home Healthcare Agency
Email remains the primary communication tool for home healthcare agencies, used daily for scheduling, sharing patient updates, coordinating care teams, and communicating with families and physicians. But while email keeps operations running, it is also the number one attack vector cybercriminals use...
Read More#Home Health#Cybersecurity#Data Protection
Cybersecurity
12/9/20256 min read
Why Regular Security Assessments Are Critical for Businesses
In today’s digital landscape, cyber threats evolve faster than most businesses can keep up. New vulnerabilities appear daily, attackers automate their tactics, and even a minor security gap can open the door to major disruptions. This is why regular security assessments are no longer optional...
Read More#Cybersecurity#Data Protection#Small Business
Cybersecurity
11/28/20256 min read
Safe Data Sharing in Home Healthcare: How to Exchange PHI Securely with Hospitals and Labs
In home healthcare, communication is everything. Caregivers share updates with hospitals, send lab information, coordinate with physicians, and report patient progress all while working outside the controlled environment of a clinic. This constant flow of information is essential for delivering trusted quality care...
Read More#Home Health#Cybersecurity#Data Protection
Cybersecurity
11/28/20259 min read
Why Cybersecurity Has Become a Patient Safety Issue in Home Health — Not Just an IT Problem
Healthcare has been the most breached industry for thirteen consecutive years. Home health agencies face the same threats as hospitals with a fraction of the security infrastructure. Here is what that means for patient safety, HIPAA compliance, and agency survival.
Read More#Thought Leadership#checklist#budget
Cybersecurity
11/28/20257 min read
How Zero Trust Protects Mobile Care Teams Working Across Multiple Locations
As home healthcare continues to shift toward mobile and remote service delivery, cybersecurity risks are rising just as quickly. Caregivers now log in from different patient homes, use various WiFi networks, and rely heavily on mobile devices to access schedules and patient records; hence Zero Trust Security Architecture must be implemented.
Read More#Home Health#Data Protection#Cybersecurity
Cybersecurity
11/28/20257 min read
Cybersecurity Training for Home Healthcare Workers: What Works and What Doesn’t
Home healthcare is built on trust, trust that caregivers will show up, provide quality care, and protect patients' PHI. But in today’s digital world, protecting patient data requires more than compassion. It requires cybersecurity awareness.
Read More#Home Health#Data Protection#Cybersecurity
Cybersecurity
11/28/20259 min read
The Top Cyber Threats Targeting Home Health Agencies in 2026 — and What Each One Costs
What your agency needs to know and how to stay protected. Home healthcare agencies are becoming one of the top targets for cybercriminals in 2025. Why? Because they collect sensitive patient information, rely heavily on mobile caregivers, and often don’t have the same security resources that large h...
Read More#Thought Leadership#Threat Intelligence#cyber attack
Cybersecurity
11/20/20257 min read
Addressing Vulnerabilities in Health Care Agencies: How to Strengthen Your Security, Protect Patient Data and Stay Compliant
Healthcare agencies are increasingly dependent on digital systems, mobile workforces, cloud platforms, and third-party vendors to deliver patient care. As cyber threats continue to target healthcare organizations, agencies must strengthen security controls, protect patient data, improve operational resilience, and meet growing compliance expectations.
Read More#Home Health#Data Protection#Cybersecurity
Cybersecurity
11/20/20258 min read
EDR Solutions for Home Health Care Agencies
Home healthcare agencies rely on mobile devices, cloud systems, and remote workers to deliver care. Learn how EDR solutions help strengthen endpoint security, reduce ransomware risk, and support HIPAA-aligned cyber resilience.
Read More#Home Health#HIPAA#Cybersecurity
Cybersecurity
11/15/20257 min read
Endpoint Detection Response Solutions for Financial Institutions
ShieldForce EDR protects financial institutions with real-time threat detection, automated response, and compliance-ready endpoint security
Read More#Home Health#Cybersecurity#Compliance
Cybersecurity
11/6/20253 min read
By Lucy Idegwu
Why XDR is the Future of Cybersecurity
Discover how XDR transforms cybersecurity by integrating data across systems to detect and respond to threats faster and more effectively
Read More#Home Health#Data Protection#Company News
Cybersecurity
11/6/20254 min read
Why Every Business Needs a Disaster Recovery Plan
Learn why every business needs a disaster recovery plan to protect data, ensure resilience, and maintain customer trust in today’s threat landscape.
Read More#Home Health#Data Protection#Cybersecurity
Cybersecurity
11/6/20254 min read
The Role of Policy Automation in Reducing Human Error
Discover how policy automation reduces human error, strengthens cybersecurity, and ensures consistent compliance across your business operations.
Read More#Home Health#Cybersecurity#Compliance
Cybersecurity
11/6/20258 min read
Best Practices for Secure Collaboration Across Teams
Discover best practices for secure team collaboration that protect sensitive data while boosting productivity and trust across your organization.
Read More#Home Health#Cybersecurity#Data Protection
Cybersecurity
10/6/20253 min read
By Obi Ibeto
The Unseen Vulnerability in Home Health Care: Protecting Patient Care in a Digital World.
The Unseen Vulnerability: Protecting Patient Care in a Digital World
Read More#Home Health#Company News#HIPAA
Cybersecurity
10/3/20251 min read
By Lucy Idegwu
How to Prevent Data Breaches with Proactive Security Solutions
Shift to a proactive cybersecurity strategy. Learn the pillars: Zero Trust, XDR, and Threat Intelligence to ensure cyber resilience and minimize costs.
Read More#Cybersecurity
Cybersecurity
7/22/20254 min read
Affordable Cybersecurity Strategies for Small Businesses in 2025
Discover affordable cybersecurity strategies for small healthcare and financial businesses in 2025. Learn budget-friendly tips to protect data, ensure HIPAA/PCI DSS compliance, and build customer trust.
Read More#Cybersecurity#Data Protection
Cybersecurity
7/2/20254 min read
The Hidden Cybersecurity Risks in Real Estate
Real estate is a prime target for cybercrime. Discover hidden risks in the property deals and how to protect your firm from costly breaches.
Read More#Home Health#Cybersecurity#Compliance
Cybersecurity
4/10/20251 min read
By Obi Ibeto
Top Expert
Learn top expert tips to avoid a $2M cybersecurity vulnerability and protect your business effectively.
Read More#Home Health#Endpoint Security#Cybersecurity
Email Security
5/9/20246 min read
By Lilian Peace
How SMBs can improve their Security Postures by implementing Zero Trust Technologies
How SMBs can improve their Security Postures by implementing Zero Trust Technologies.
Read More#Email Security#Cybersecurity#Data Protection
Cybersecurity
5/9/20246 min read
By Lilian Peace
How SMBs can Increase their Security Posture By Implementing Automation
How SMBs can Increase their Security Posture By Implementing Automation
Read More#Cybersecurity
Cybersecurity
5/9/20243 min read
By Lilian Peace
Keeping up to date with Trends in Phishing Attack and Exploring Effective Strategies for Prevention, Detection and Response
Keeping up to date with Trends in Phishing Attack and Exploring Effective Strategies for Prevention, Detection and Response
Read More#Endpoint Security#Data Protection#Cybersecurity
Cybersecurity
5/9/20243 min read
By Lilian Peace
How to Protect your WhatsApp account and Retrieve Hacked Account
How to Protect your WhatsApp account and Retrieve Hacked Account
Read More#Home Health#Small Business#Company News
Cybersecurity
5/9/20244 min read
By Lilian Peace
Top 10 Techniques to Protect your FaceBook account from Hackers
Top 10 Techniques to Protect your FaceBook account from Hackers
Read More#Endpoint Security#Data Protection#Cybersecurity
Cybersecurity
5/9/20244 min read
By Lilian Peace
Top Security Challenges and Risk associated with the increase in Connected IoT Devices
Top Security Challenges and Risk associated with the increase in Connected IoT Devices
Read More#Company News#Cybersecurity
Cybersecurity
3/6/20242 min read
By Obi Ibeto
ShieldForce Cybersecurity Service Now Available in the Microsoft Azure Marketplace
ShieldForce Cybersecurity Service Now Available in the Microsoft Azure Marketplace
Read More#Home Health#Data Protection#Company News
Cybersecurity
2/26/20245 min read
By Lilian Peace
Application of Machine Learning in Cybersecurity for Small Business
Application of Machine Learning in Cybersecurity for Small Business
Read More#Cybersecurity
Ransomware Readiness
2/26/20246 min read
By Lilian Peace
Top 15 Techniques to Protect your Workstation from Ransomware and Malware.
Top 15 Techniques to Protect your Workstation from Ransomware and Malware.
Read More#Ransomware#Cybersecurity
HIPAA & Compliance
1/29/20248 min read
By Obi Ibeto
Complex Systems and Database Security: An Introduction
Complex Systems and Database Security: An Introduction
Read More#HIPAA#Endpoint Security#Cybersecurity
Cybersecurity
1/29/20245 min read
By Obi Ibeto
Common Cybersecurity Concepts that might save your Business from a Cyber Attack
Common Cybersecurity Concepts that might save your Business from a Cyber Attack
Read More#Home Health#Data Protection#Endpoint Security
Cybersecurity
12/13/20234 min read
By Obi Ibeto
What is Zero Trust Data Security?
What is Zero Trust Data Security
Read More#Cybersecurity
Cybersecurity
12/11/20232 min read
By Obi Ibeto
Press Release: ShieldForce Cybersecurity Service Goes Live in the United States
ShieldForce Press Release - ShieldForce rolls out Cybersecurity subscription plans into US Market
Read More#Home Health#Endpoint Security#HIPAA
Email Security
11/22/20238 min read
By Obi Ibeto
Cloud Security Guidelines for eCommerce based Businesses
Cloud Security guidelines for eCommerce based businesses
Read More#Email Security#Cybersecurity
HIPAA & Compliance
11/20/20233 min read
By Obi Ibeto
The Role of Cybersecurity in the Modern World
The Role of Cybersecurity in the Modern World
Read More#HIPAA#Cybersecurity#Endpoint Security
HIPAA & Compliance
11/20/20234 min read
By Obi Ibeto
Continuous User Authentication: Effective against Social Engineering Attacks
Continuous User Authentication: Effective against Social Engineering Attacks
Read More#HIPAA#Small Business#Email Security
Email Security
11/16/20234 min read
By Obi Ibeto
The Las Vegas Cyber Attacks: How to Apply Lessons Learned and Protect your Company
The Las Vegas Cyber Attacks: How to Apply Lessons Learned and Protect your Company
Read More#Email Security#Data Protection#Small Business
Cybersecurity
11/6/20231 min read
By Obi Ibeto
Top 10 Shocking Cybersecurity Strategies used by Nigerian Scammers to target US Based Businesses
Top 10 Shocking Cybersecurity Strategies used by Nigerian Scammers to target US Based Businesses
Read More#Compliance#Data Protection#Small Business
Email Security
10/4/20231 min read
By Obi Ibeto
Top 15 Secret Information Technology Policies Revealed to Protect your Organization
Top 15 Secret Information Technology Policies Revealed to Protect your Organizations Information Assets from Financial losses and Reputational damage.
Read More#Email Security#Data Protection#Cybersecurity
Cybersecurity
9/29/20231 min read
By Obi Ibeto
Top 10 Secret Cybersecurity Strategies Revealed to protect your Workstations
Top 10 Secret Cybersecurity Strategies Revealed to protect your workstations from financial losses and reputational damage through social engineering.
Read More#Cybersecurity