KEY LEARNINGS

• Hacking comprised 86 percent of the reported breaches
• The percentage of breach investigations involving PHI decreased
• Many enforcement actions were through the HIPAA Right of Access Initiative