On September 17, 2026, Sens. Mark R. Warner (D-VA) and Ron Wyden (D-OR) reintroduced the Health Infrastructure Security and Accountability Act suggesting obligatory cybersecurity criteria…
Read MoreThe pharmaceutical research firm Inotiv, based in West Lafayette, Indiana, recently announced a ransomware attack and data breach that resulted in the extraction of sensitive…
The healthcare company, CarePro Health Services, based in Iowa, decided to settle a class action litigation for $1.3 million. The lawsuit is associated with a…
Penetration testing conducted on ten State Medicaid Management Information Systems (MMIS) and Eligibility & Enrollment (E&E) systems has revealed vulnerabilities that could potentially be exploited…
23andMe agreed to settle a class action lawsuit related to a 2023 breach of customer information. The breach happened in October 2023 and involved the…
Providence Sacred Heart Medical Center & Children’s Hospital, located in Spokane, Washington, terminated fifteen nurses because of HIPAA violations. Allegedly, the nurses viewed a 12-year-old…
In case of violation of Health and Human Services (HHS) regulations by individuals or entities (this includes HIPAA-covered entities), HHS could decide to create a…
A registered practical nurse posted a med pass on TikTok and was terminated from work, and is now dealing with a Board of Nursing investigation…
The National Institute of Standards and Technology (NIST) has published a draft update on its Privacy Framework to include the most recent cybersecurity rules and…
Officers at Hamilton County in Tennessee have stated that the protected health information (PHI) of 14,081 people was exposed in a security incident at a…
Infosys McCamish Systems agreed to settle multiple class action lawsuits that were filed because of a 2023 ransomware attack. The data breach involved unauthorized access…
In December 2024, the Department of Health and Human Services released a Federal Register final rule changing the Retail Pharmacy Standards of the National Council…
Ivanti has issued patches for two vulnerabilities found in Connect Secure. The first vulnerability is a critical zero-day remote code execution vulnerability that threat actors…
The Health Sector Cybersecurity Coordination Center (HC3) published a new Analyst Note regarding credential harvesting, including an alert concerning an active credential harvesting campaign that…
The White House Office of Information and Regulatory Affairs is doing one last review of a proposed rule by the Occupational Safety and Health Administration…
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has reached a $250,000 settlement with Cascade Eye and Skin Centers, P.C.,…
A $2.95 million financial penalty payment is proposed by the Federal Trade Commission (FTC) for Verkada, a security camera vendor based in California, to settle…
According to information provided by the Vipre Security Group, there’s a spike in business email compromise attacks in the previous year and cybercriminals are using…
The healthcare industry is facing more severe and sophisticated cyberattacks. Greater effort is necessary to strengthen protection, attacks will likely keep increasing. These attacks present…
Blackbaud has decided to pay $6.75 million to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA) and California’s data privacy regulations…
858K Individuals Impacted by Superior Air-Ground Ambulance Service Data Breach Superior Air-Ground Ambulance Service provides ambulance and Emergency Medical Services (EMS) in Indiana, Illinois, Michigan,…
Administration services provider to medical insurance and benefit plans, WebTPA based in Texas, recently began sending notification letters to 2,429,175 benefit plan members concerning the…
Investigation Of Ascension Cyberattack Ascension, a leading non-profit and Catholic health system in the U.S., has reported the investigation of a supposed cyberattack that has…
Wisconsin Dental Surgery Center Email Account Breach Bay Oral Surgery & Implant Center (Bay Oral), a group of oral & maxillofacial dental surgery centers located…
OctaPharma Plasma Donation Centers Shut Down While Investigating Ransomware Attack The Swiss pharmaceutical company, Octapharma Plasma, encountered a cyberattack that impacted the systems at 190…
Epic Systems has shut down access to information for a startup company called Particle Health after it alleged that the company was disclosing patient information…
Over 547,000 People Impacted by The Chattanooga Heart Institute Cyberattack on April 2023 The Chattanooga Heart Institute has found out that its April 2023 cyberattack…
Aveanna Healthcare Email Account Breach Home health and hospice care provider, Aveanna Healthcare based in Atlanta, GA, announced a security breach of its email environment…
Credential Harvesting Mitigations Shared by HHS The Health Sector Cybersecurity Coordination Center (HC3) has published a healthcare and public health (HPH) sector advisory concerning credential…
Data Breach at Weirton Medical Center in West Virginia Weirton Medical Center based in West Virginia discovered suspicious activity inside its computer system on January…
HSCC’s 5-Year Strategic Program for Strengthening Healthcare Cybersecurity Healthcare cyberattacks are increasing in number and intensity every year. In 2023, around 740 healthcare data breach…
177,000 Patients Affected by Northeast Orthopedics and Sports Medicine Breach Northeast Orthopedics and Sports Medicine located in Nanuet, NY recently announced a cyberattack that affected…
Apria Healthcare Faces Lawsuit Over HIPAA Violations Indiana Attorney General Todd Rokita is taking legal action against Apria Healthcare for violating the Health Insurance Portability…
Vulnerabilities identified in the remote desktop software ConnectWise ScreenConnect are being exploited to deliver a selection of different malicious payloads into enterprise environments. ConnectWise first…
The Department of Health and Human Services (HHS) Office for Civil Rights has filed its annual report to Congress about compliance with the HIPAA Privacy,…
U.S. Senator Ron Wyden (D-OR) wrote to the Federal Trade Commission (FTC) and the Securities and Exchange Commission (SEC) requiring action to safeguard customers and…
The Government Accountability Office (GAO) has discovered that many federal agencies that deal with risk for critical infrastructure sectors have evaluated or intend to monitor…
462,000 Hawaiians Impacted by the Navvis & Company Data Breach Around 462,000 people who signed up for health plans with the Hawaii Medical Service Association…
133K Records Exposed at Columbus Regional Healthcare System Columbus Regional Healthcare System in Whiteville, NC, submitted a report to the Maine Attorney General concerning a…
HMG Healthcare Data Breach Impacts 80,000 People Healthcare services provider HMG Healthcare, LLC based in Texas recently reported the exposure and potential theft of the…
Integris Health is facing some class action lawsuits because of a recent cyberattack that resulted in a data breach. Although there’s no confirmation yet from…
ProSmile Holdings Patients Affected by July 2022 Data Breach Dental service organization ProSmile Holdings, LLC in New Jersey, notified patients on December 22, 2023, regarding…
About 6 lawsuits were filed against the Fred Hutchinson Cancer Center because of a cyberattack and data breach that happened on the Thanksgiving weekend of…