Search
magnifying-glass
The Encrypted Chart
Log in
Subscribe
Home
Archive
The Encrypted Chart

Practice Security

Practice Security

+2

The Annual HIPAA Risk Assessment: Why It Exists and Why One Click in Illinois Just Made It Urgent

Aug 8, 2026

•

4 min read

The Annual HIPAA Risk Assessment: Why It Exists and Why One Click in Illinois Just Made It Urgent

Fourteen investigations, one missing document, and the quietest four weeks of your working year.

Brad Lieberman
Brad Lieberman

Practice Security

+1

I Bolted a Hard Drive to a Desk That Moves Up and Down

Aug 4, 2026

•

7 min read

I Bolted a Hard Drive to a Desk That Moves Up and Down

A moving day, a screwdriver, and the part of HIPAA nobody writes about

Brad Lieberman
Brad Lieberman

Practice Security

+1

No One Hacked Your EHR. They Just Logged In.

Jun 24, 2026

•

3 min read

No One Hacked Your EHR. They Just Logged In.

In June, researchers found a database of 24 billion stolen passwords, most of it freshly lifted off infected personal devices. Here is how a solo practice's EHR login lands in it, and why "remember this device for 30 days" quietly cancels the MFA you were counting on.

Brad Lieberman
Brad Lieberman

Practice Security

+2

The Email Habits That Just Cost a Mental Health Practice $900,000

Jun 13, 2026

•

5 min read

The Email Habits That Just Cost a Mental Health Practice $900,000

A Massachusetts behavioral health center settled a class action this week for $900,000 over a breach that started with one phished email account. A national legal alert published two days ago explains how a routine group email becomes a reportable HIPAA event. Both stories point at the same form most solo therapy practices don't have.

Brad Lieberman
Brad Lieberman

Practice Security

+1

Three Breaches Last Month. All Started With One Email

Jun 9, 2026

•

6 min read

Three Breaches Last Month. All Started With One Email

The Acadia Healthcare notice that went out May 22, the Genesis ransomware that hit an independent California cardiology practice, and the 35,000-account phishing campaign Microsoft tracked in April. Same fact pattern, three different scales. The attackers did not break in. They logged in.

Brad Lieberman
Brad Lieberman

Practice Security

+1

Your Website Is Probably Leaking Patient Data to TikTok and Meta.

May 16, 2026

•

5 min read

Your Website Is Probably Leaking Patient Data to TikTok and Meta.

Bloomberg just confirmed every state-run health insurance exchange in America is doing it. The same tracking pixels sit on most practice websites. Here's the operational audit that closes the gap this week.

Brad Lieberman
Brad Lieberman

The Encrypted Chart

Join the list to receive our newest posts straight to your inbox.

The Encrypted Chart

Home

Subscribe

Archive

Login

Reset Password

Update Password

Profile

Search

© 2026 The Encrypted Chart · The Encrypted Chart is published by Lieberman Consulting, LLC, a consulting firm — not a law firm. Content is educational, not legal advice..
beehiivPowered by beehiiv