Help Me With HIPAA

Forget Mission: Impossible-style hacking - today's cyber crooks are all about manners. In this episode, we unravel how asking "pretty please" can crack open digital doors faster than any brute force attack. With tips, tales, and a touch of panic, we break down the importance of knowing your personal risk profile, locking down your accounts, and yes - finally turning on that MFA you've been ignoring.

More info at HelpMeWithHIPAA.com/525

If you thought HIPAA only applied to big hospitals and medical groups swimming in patient data, think again. In this episode, we uncover how just one record with PHI can infect your organization with full-blown HIPAA responsibilities — no vaccine required. We dive into a juicy enforcement case featuring a CPA firm that got hit with a ransomware attack and a $175K HIPAA oopsie, all because someone skipped their security risk analysis. Spoiler: ignorance is not immunity.

More info at HelpMeWithHIPAA.com/524

Strap in, folks—this episode charges into the wild frontier of cybersecurity, where Shadow AI runs loose like a toddler with admin access. Whether your security plan is airtight or held together by paperclips and prayers, this deep dive into the IBM Cost of a Data Breach 2025 report offers plenty to think about. From eye-popping breach costs to the cringe of unsecured AI, we're covering the good, the bad, and the downright reckless. Spoiler: "we don't use AI" might be the biggest myth since "the check's in the mail."

More info at HelpMeWithHIPAA.com/523

You might think a single ransomware attack is just a tech hiccup—but tell that to the medical practice that shut its doors permanently because of one. In this episode, we dissect what really happens when cybersecurity goes sideways, peeling back the layers of tech jargon to expose the raw, messy fallout of a breach. It's less "oops, I forgot my password" and more "goodbye, 12 years of business." Let's get real about what these incidents cost—not just in dollars, but in dignity.

More info at HelpMeWithHIPAA.com/522

What do hackers, patient scams, and IT help desks with too much trust have in common? They're all making healthcare cybersecurity a lot messier—and a lot more vomit-worthy. In this episode, we dive into how bad actors are not only stealing data but turning patients into direct targets. From sneaky social engineering tactics to "I can't believe they answered that call" level IT fails, we explore why locking down your network is only half the battle.

More info at HelpMeWithHIPAA.com/521

If you thought AI was just about asking ChatGPT for dinner ideas, think again. This episode unpacks the next-level madness of agentic AI—those industrious bots that not only check your emails but might just decide how your healthcare practice runs. We're talking phishing attacks on steroids, decision-making algorithms with questionable judgment, and the jaw-dropping ways AI is working for—and against—us in cybersecurity. It's part fascinating, part terrifying, and 100% worth listening to.

More info at HelpMeWithHIPAA.com/520

You know that moment when someone casually slides a contract across the table and says, "Just sign here"? Yeah, don't do that—especially when it's a Business Associate Agreement. This episode is a deep dive into the dark corners of BAAs, the traps they hide, and why you should read every line like it's a ransom note. From ping floods to passive-aggressive breach clauses, we unpack the weird, wild world of healthcare contracts. Oh, and stick around—because just when you think it can't get any messier, a breach shows up to ruin everyone's day.

More info at HelpMeWithHIPAA.com/519

Think cybersecurity laws are just for the big guys? Think again. In this episode, we unravel the patchwork of new state regulations popping up faster than a phishing scam in your inbox—Ohio, Utah, Texas, Florida, and even Iowa are throwing their hats into the compliance ring. From safe harbor perks to tiered requirements for small businesses (yes, Texas made a flowchart-worthy version), we decode what these laws mean, who they apply to, and why HIPAA entities seem to always get the "you're fine, probably" treatment. Bonus: there's a federal bill in Congress that might actually help. Maybe.

More info at HelpMeWithHIPAA.com/518

Strap in, folks—this isn't your average cybersecurity snoozefest. We're plugging into a conversation with Greg Garcia, the guy who's been leading healthcare's cyber crusade like it's the season finale of a medical drama. From hospitals fending off ransomware to the chaotic ballet of patching ancient medical devices, it's clear: in a world where tech keeps patients breathing, cyber safety is patient safety. And no, turning it off and on again won't fix this one.

More info at HelpMeWithHIPAA.com/517

If you thought "One Phish, Two Phish" was a Dr. Seuss classic, think again—this cybercrime edition comes with a twist of ransomware, app-specific passwords, and a side of website hijacking. This week, we explore what happens when software vendors forget to patch, hackers start crafting emails better than your favorite copywriter, and your website becomes a party zone for malware. It's an episode full of lessons, laughs, and mild panic—just the way we like it.

More info at HelpMeWithHIPAA.com/516