Incident Response Blog
Browse our collection of Incident Response articles and resources
Incident Response Guide: When a Guest Wi‑Fi Captive Portal Logs Clinic Staff Credentials
Incident Identification. Recognize the scenario. You may discover that a guest Wi‑Fi captive po...
What to Do If a Former Employee Still Has Remote EHR Access After Termination: Immediate Steps
Discovering that a former employee still has remote EHR access is an urgent risk to Protected Hea...
Immediate Incident Response Steps After a Ransomware Note Appears on Radiology Workstations
Isolate Infected Radiology Workstations. Act immediately to achieve Ransomware Containment and s...
What to Do When the State AG Subpoenas Your Clinic Over a Suspected Ransomware Cover‑Up
Respond to State AG Subpoena. A state attorney general subpoena signals serious scrutiny. Treat ...
Lost a USB Drive with Exported Billing Files? Here's What to Do Immediately
Immediate Actions after Losing USB with Billing Files. If you just realized you lost a USB drive...
Step-by-Step Incident Response After Discovering an Open Redis Instance Caching EHR Session Tokens
Identification and Initial Assessment. You’re dealing with potential PHI exposure and active ses...
Step-by-Step Incident Response When a Clinic’s Guest WiFi Bridges into the EHR VLAN
Immediate Isolation of Guest WiFi. First 15 minutes: stop the bleed. Disable the guest SSID ...
What to Do If a Terminated Contractor Still Has Access to Your Shared Mailbox for Referrals
Immediate Access Revocation. Act in the first 10 minutes. Block the account’s ability to aut...
HIPAA Incident Response: What to Do When Phishing Credentials Unlock Your Practice Email
If a phishing credential compromise unlocks your practice email, you must assume a risk of ePHI U...
Incident Response Playbook for a Stolen Clinic Tablet with Cached Patient Lists
This incident response playbook gives you a precise, action-first path to contain risk, verify Pa...
Sanctions Log After a TikTok or Filming Incident: Template and Reporting Guide
Use this guide to create a clear sanctions log after a TikTok or on‑site filming incident. You’ll...
How to Respond to an HHS Office for Civil Rights (OCR) Data Request Without Oversharing Unrelated PHI
When you receive an HHS Office for Civil Rights (OCR) data request, your goal is to be responsive...
Why Choose Accountable's HIPAA Training
Join thousands of organizations that trust Accountable to manage their compliance needs.
-
Fast and effective - Complete your training in minimal time
-
Engaging video content - No boring slides, just clear and practical lessons
-
Compliance-focused - Covers all key HIPAA regulations for privacy and security