The Protenus Breach Barometer recently released a snapshot of breaches affecting the healthcare industry. In this report, Protenus shared that of the incidents reported in September that they had data for, it took an average of 151 days from the time the breach occurred to when HHS was notified. Protenus had found this average to be 558 days in August 2016, however, this may be due to some breach incidents not being reported for several years. It took one organization two years to even realize a breach had even occurred.
In September, 21 states reported the 37 breach incidents that occurred. California had the most reports with a total of 11 breaches in September and Pennsylvania followed in second place with four incidents. New York and Oregon alike had two incidents whereas all other states reporting only had one incident each.