The Health Sector Cybersecurity Coordination Center (HC3) has provided threat intelligence advice regarding the Black Basta ransomware group to aid network defenders to avoid and…
CISA and the FBI published a joint cybersecurity advisory and shared information about the tactics, techniques, and procedures (TTPs) utilized by the Royal ransomware group…
The Federal Trade Commission (FTC) has reported that it has reached a settlement with BetterHelp Inc., an online counseling service provider based in California, to…
Hacking Incident at The Hutchinson Clinic in December 2022 The healthcare company The Hutchinson Clinic based in Hutchinson, KS lately reported that hackers gained access…
Hacking and Data Theft Incident at CentraState Healthcare System CentraState Healthcare System based in Freehold Township, NJ has just reported that unauthorized individuals breached its…
$3 Million Settlement Offered to Resolve 20/20 Eye Care Network Data Breach Lawsuit iCare Acquisitions has offered to pay $3 million to settle claims from…
Healthcare providers are spending on cybersecurity to enhance their protection against increasing and more sophisticated cyberattacks. Even with the improvements in an organization’s security posture,…
Whenever a data breach happens and sensitive data is exposed, the HIPAA Breach Notification Rule demands the notification of affected persons. The FTC Health Breach…
Ransomware groups are earning less from their cyberattacks as fewer victims pay ransoms to acquire the decryption keys and keep the stolen information from publicity,…
A Washington therapist, Robert S. Miller LICSW, ACSW (RSM), lately informed 640 present and past clients concerning a phishing attack that led to the compromise…
Healthcare ransomware attacks have doubled in the last 5 years, data restoration from backups has lessened, and it is now typical for information to be…
A lot of ransomware attacks remain performed on healthcare providers, however, identifying the magnitude to which healthcare companies are being targeted by ransomware attackers is…
Plaintiffs in a combined class action lawsuit against Meta recently sought an injunction versus Meta to make the company stop getting and transmitting information accumulated…
Passwords can give a good level of security, yet oftentimes end users pick poor passwords that don’t make it difficult for attackers. Plenty of the…
Cyberattacks have grown in frequency and complexity to the point that all healthcare organizations are likely to experience a successful attack sooner or later. It…
The Health Sector Cybersecurity Coordination Center (HC3) has published an alert to the healthcare and public health (HPH) sector concerning Royal ransomware attacks. This new…
A Notice of Proposed Rulemaking (NPRM) has been released by the Department of Health and Human Services (HHS) and the Substance Abuse and Mental Health…
The U.S. Department of Justice has charged 10 people with business email compromise scams that brought about losses of over $11.1 million from Medicare, Medicaid,…
CorrectCare Integrated Health, a medical claims processor, lately informed its clients about the accidental exposure of the protected health information (PHI) of a number of…
The federal government has released an alert to the healthcare industry concerning the danger of cyberattacks conducted by Iranian threat actors. Iranian state-sponsored actors do…
The OpenSSL Project stated recently that it would release a patch on November 1, 2022, to fix a critical OpenSLL vulnerability. Information on how to…
Database Misconfiguration at Delaware Department of Health and Social Services The Delaware Department of Health and Social Services, Division of Developmental Disabilities Services (DDDS) has…
Lifespire Services located in New York provides people with developmental handicaps healthcare services. The company initially reported a security incident in April 2022 and now…
Threat actors commonly use living-off-the-land techniques for performing reconnaissance, privilege elevation, persistence, and moving laterally inside networks undiscovered. Similar software and security resources employed by…
An affiliate of the notorious Netwalker ransomware group was sentenced to 20 years in prison because of taking part in ransomware attacks on U.S. companies….
The Health Sector Cybersecurity Coordination Center (HC3) has given an alert concerning the Chinese state-sponsored threat actor monitored as APT41. This threat group has been…
Lubbock Heart & Surgical Hospital based in Texas lately reported its encounter with a hacking incident that disrupted the operations of part of its IT…
Ambry Genetics has made a decision to resolve a class action lawsuit that was because of a breach of the protected health information (PHI) of…
The Michigan law firm, Warner Norcross and Judd LLP, has released notification letters to 255,160 persons informing them about a data breach in October 2021…
First Street Family Health located in Salida, CO has experienced a dangerous cyberattack that led to the exfiltration of files composed of patient data and…
The California Department of Corrections and Rehabilitation (CDCR) has just learned that unauthorized persons have acquired access to its information systems. The affected system stored…
A digital marketing and analytics firm located in Idaho filed a lawsuit against the Federal Trade Commission for allegedly violating the Federal Trade Commission (FTC)…
Zenith American Solutions, the Sound Health and Wellness Trust’s third-party administrator, just informed people concerning a mailing error that exposed the Social Security numbers of…
Cyberattacks on companies are growing year after year in all industries. Cyberattacks that involve third parties likewise increased. From the viewpoint of a cyber attacker,…
Tenet Healthcare lost $100 million in earnings and mitigation expenses due to a cyberattack and data breach that occurred in Q2 of 2022. Tenet Healthcare…
Benson Health in North Carolina has lately begun informing 28,913 individuals about the potential access or acquisition of their protected health information (PHI) during a…
Associated Eye Care Partners (AECP) based in Montana has lately begun informing patients about the compromise of their private health data because of a data…
Jack Hughston Memorial Hospital Reported Cyberattack Jack Hughston Memorial Hospital based in Phoenix City, AL has just announced that attackers have obtained access to its…
Hearst Health subsidiary, MCG Health located in Seattle, is confronting multiple class-action lawsuits because of a data breach that affected roughly 10 healthcare institutions, for…
Meta is facing a lawsuit that alleges the social media giant has been knowingly acquiring patient data from hospital sites through the Meta Pixel tracking…
San Diego Family Care, a dental, medical, & mental health services provider in California, has decided to settle a class-action lawsuit filed by patients impacted…
Allaire Healthcare Group and Platinum Hospitalists have lately reported that an unauthorized individual has acquired access to the email account of a worker and likely…
Allwell Behavioral Health Services based in Zanesville, OH, has reported that an unauthorized individual accessed a computer system employed to keep quality assurance data associated…
For the last 15 years, Verizon has been creating yearly Data Breach Investigation Reports (DBIR). The report this year confirms just how awful the past…
Solara Medical Supplies proposed to pay $9.76 million as a settlement for a class-action lawsuit associated with a 2019 data breach. This proposal has obtained…
Researchers discovered that a misconfigured AWS S3 bucket is leaking data. This cloud storage belongs to a breast cancer support charity based in Ardmore, PA,…
The average ransom payment related to ransomware attacks dropped by 34% in the 1st Q of 2022 from Quarter 4 of 2021’s all-time high, in…
The American Dental Association (ADA) experienced a cyberattack and was compelled to take lots of of its systems offline. The ADA website is presently accessible…
New research shared in JAMA Open Network revealed that quick intervention right after an incident of unauthorized access to protected health information (PHI) by medical…
Five zero-day vulnerabilities were found in Aethon TUG autonomous mobile robots, which are utilized in hospitals globally for moving merchandise, drugs, and other medical resources….
The Department of Health and Human Services’ Office for Civil Rights has publicized a Request for Information (RFI) in connection with two specific specifications of…
The Need to Have Reforms Before HIPAA, the medical insurance sector is complicated. As this sector changed, a lot of jurisdictions had viewed the ease…
Present Biden has released a notice regarding the elevated threat of cyberattacks brought on by Russian state-sponsored hackers because of the economic sanctions enforced on…
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have given a joint cybersecurity alert cautioning that Russian state-sponsored actors…
This article talks about why HIPAA compliance is crucial for healthcare specialists. It clarifies why healthcare specialists are unable to avoid HIPAA; and that, through…
Jax Spine & Pain Centers Jax Spine and Pain Centers located in Jacksonville, FL has just announced that it experienced a ransomware attack that took…
The U.S. Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center has released a threat report cautioning about the dangers relevant to electronic…
Family Christian Health Center (FCHC) based in Illinois has announced suffering a ransomware attack in November 2021 that resulted in the compromise of the protected…
The FBI has published indicators of compromise (IoCs) and information of the tactics, techniques, and procedures (TTPs) related to Lockbit 2.0 ransomware. The Lockbit ransomware-as-a-service…
Ransomware Attack on Vendor Impacted Allegheny Health Network Home Infusion Patients Allegheny Health Network Home Infusion based in Pittsburgh, PA was alerted concerning a ransomware…
Marietta Area Health Care Inc., also known as Memorial Health System, is confronting a class action lawsuit in relation to a cyberattack and data breach…
A Minnesota network of family medicine practices commenced informing around 200,000 individuals concerning the potential exposure of their personal information and protected health information (PHI)…
The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the National Security Agency (NSA) has released a joint notification to…
There are likely to be new HIPAA rules in 2022 as soon as OCR publicizes the final rule on the proposed amendments to the HIPAA…
The COVID-19 pandemic did not result in any long-lasting adjustments to HIPAA, but it has seen unparalleled flexibilities presented on a short-term basis to make…
Monongalia Health System in Morgantown, WV has begun informing approximately 400,000 individuals that unauthorized people may have acquired their protected health information (PHI) in a…
The University of Houston College of Optometry has learned that an unauthorized person from beyond the United States got access to an affiliated eye clinic’s…
On October 11, 2021, TriValley Primary Care based in Perkasie, PA identified ransomware installed on its systems and servers that held the protected health information…
The Health Care Compliance Association (HCCA) is going to host the 26th Annual Compliance Institute on March 28 – 31, 2022 at the Phoenix Convention…
Retinal Consultants Medical Group, Three Rivers Regional Commission, and ACE Surgical Supply have lately announced cyber attacks by which unauthorized individuals might have obtained the…
The Health Sector Cybersecurity Coordination Center (HC3) of HHS is warning the medical care industry because cyber attackers had been using the Cobalt Strike penetration…
JEV Plastic Surgery & Medical Aesthetics based in Owing Mills, MD has begun informing 1,620 patients regarding the compromise of some of their protected health…
Seneca Family of Agencies based in California, a provider of education, mental health, juvenile justice, placement, and permanency services, noticed unauthorized activity inside its computer…
In July 2021, the well-known REvil (Sodinokibi) ransomware gang seemed to have stopped operations, as its Tor payment website and data leak blog instantly went…
Close to 27,500 people received notification about the stealing of some of their personal information when the American Osteopathic Association (AOA) experienced a cyberattack. AOA…
Public and private sector organizations can use a new tool to assess how vulnerable they are to insider threats. This newly-released Insider Threat Risk Mitigation…
The Food and Drug Administration (FDA) has released an alert to customers of Medtronic wireless insulin pumps regarding a critical security vulnerability affecting selected remote…
The non-profit behavioral health service provider in Clearwater, FL Directions for Living encountered a ransomware attack on July 17, 2021. When Directions for Living discovered…
Family Medical Center of Michigan (FMC) located in Temperance, MI has informed 21,988 patients regarding a July 2020 ransomware attack that led to the likely…
Desert Wells Family Medicine located in Queen Creek, AZ has commenced informing 35,000 individuals concerning the exposure of their protected health information (PHI) in the…
LifeLong Medical Care, a Californian healthcare firm serving patients in Contra Costa, Alameda, and Marin Counties, has informed a number of patients who had their…
There are a lot of advantages that have resulted from HIPAA, the most widely known of which are enhancing privacy security for patients and enhancing…
St. Joseph’s/Candler (SJ/C) hospital system based in Savannah, GA encountered a ransomware attack on June 17, 2021 at about 4 a.m. Upon discovery of the…
The National Institute of Standards and Technology (NIST) has published an important update to its guidance on creating cyber-resilient systems. The draft of the revised…
Prestera Mental Health Center based in West Virginia began informing 2,152 individuals regarding a security breach affecting employee email accounts. On or about April 1,…
UPMC has offered a $2.65 million payout to take care of a data breach legal action filed by workers affected by a data breach in…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published a new tool to help organizations assess how proficiently they are equipped to safeguard against…
SonicWall has given an important security notice cautioning users of the Secure Remote Access (SRA) products and Secure Mobile Access (SMA) 100 series operating on…
Hoya Optical Labs Ransomware Attack Impacts Over 3,000 Patients Hoya Optical Labs has begun sending notifications to some patients concerning a ransomware attack that potentially…
The Government Accountability Office has publicized a report after an assessment of the organizational solution to the cybersecurity of the U.S. Department of Health and…
A database that belongs to CVS Pharmacy having roughly 1 billion search records was compromised on the internet. The database contained data regarding searches done…
Arizona Asthma and Allergy Institute mailed breach notification letters to 70,372 individuals who acquired services from October 1, 2015 to June 15, 2020. In accordance…
The medical insurance and healthcare company Humana in Louisville, KY, and its business associate Cotiviti are dealing with a lawsuit because of a data breach…
Scripps Health, the second-largest healthcare provider in San Diego, has begun mailing breach notification letters to 147,267 patients to let them know about the theft…
After the ransomware attack on Colonial Pipeline, several ransomware groups for example REvil and Avaddon stated that they have put in place new policies that…
Arizona Asthma and Allergy Institute based in Peoria, AZ has found out that the protected health information (PHI) of approximately 50,000 patients was momentarily compromised…
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have released a notification concerning DarkSide ransomware in the aftermath of…
Network intrusion problems have overtaken phishing as the top cause of healthcare data security mishaps, which has been the principal cause of data breaches for…
An unauthorized individual acquired access to a River Springs Health Plans employee’s email account and installed malware that possibly permitted the extraction of email account…
The Department of Health and Human Services created the new information blocking and interoperability rules which were included in the 21st Century Cures Act. It…