Live data from Hacker News

ICE shared Medicaid data it wasn't supposed to have with Palantir

npr.org

1–10 of 29 posts

Re: ICE shared Medicaid data it wasn't supposed to have with Palantir

#3
The government's stated remediation for the Palantir transfer was that the data had been shared over a Microsoft Teams chat and was deleted from the chat. That is not a deletion.

According to CMS's security program documentation, Medicare and Medicaid are a covered entities under HIPAA, subject to 60 day notice to affected individuals, reporting to HHS OCR, and notice to media outlets when a breach affects more than 500 residents of a state.

Not to mention this violated a standing court order.

https://security.cms.gov/learn/cms-breach-response-handbook

Post reply on HN