On July 11, 2016, the Department of Health and Human Services – Office for Civil Rights (“OCR”), the office that enforces the Health Insurance Portability and Accountability Act (“HIPAA”), sent out an email detailing new guidance to help health care organizations fight ransomware attacks. These attacks are increasing in frequency and protected health information (“PHI”) held by health care organizations presents a particularly attractive target. Further details on ransomware and an outline of OCR’s guidance…