Vendor and BAA Risk

Your Vendor's Breach Just Became Your Lawsuit.

Jun 2, 2026

•

4 min read

Your Vendor's Breach Just Became Your Lawsuit.

A federal court in Chicago ruled last week that patients can sue a healthcare provider over a vendor's data breach. The diligence defense — "they were reputable, they had certifications, I trusted them" — just got materially narrower.

Brad Lieberman

Vendor and BAA Risk

May 9, 2026

•

7 min read

When Your Billing Service Gets Hacked: A $225K Federal Wake-Up Call

If your billing service got hacked tomorrow, what does the contract you signed with them actually say? Last month the federal government fined a vendor in that exact pattern $225,000. Here's what to read this week — before it's your patients calling.

Brad Lieberman

Vendor and BAA Risk

Five Questions Hospital Compliance Officers Ask About AI Scribes — and Solo Practices Don't

May 6, 2026

•

8 min read

Five Questions Hospital Compliance Officers Ask About AI Scribes — and Solo Practices Don't

The institutional version of this conversation happens before the contract is signed. The independent version happens after the breach. Here's the operational protocol that bridges them.

Brad Lieberman

Vendor and BAA Risk

Your Vendor's Breach Just Became Your Lawsuit.

When Your Billing Service Gets Hacked: A $225K Federal Wake-Up Call

Five Questions Hospital Compliance Officers Ask About AI Scribes — and Solo Practices Don't

The Encrypted Chart

The Encrypted Chart