Reporting requirements of New York’s SHIELD Act go into effect on October 23; healthcare organizations that collect or use personal or private data from state residents will need to be in compliance.
The agency says threat actors are targeting organizations' IT help desks with phone calls from a local area code claiming to be revenue cycle or administrator employees. After gaining access, they divert legitimate payments.