PrivacySignal
Breach

$80 Million Settlement Proposed to Resolve Conduent Data Breach Litigation

HIPAA Journal · · US Federal · Data Breaches

A proposed $80 million settlement has been put forward to resolve a consolidated class action lawsuit against Conduent Business Services over a data breach. The case was covered by The HIPAA Journal, suggesting the breach involved protected health or personal information handled by the business services company.

Why this matters: Conduent is a back-office contractor. It processes data on behalf of other organizations, which means the people affected probably never heard of the company that held their information. That is common in healthcare and government services, and it is a real problem. When a breach happens at a vendor, the people whose data was exposed often have no idea who lost it or why that company had it in the first place. An $80 million settlement is significant, but the more important question is what kind of data Conduent held and whether the organizations that hired them checked that it was properly protected.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
BleepingComputer · · International

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
Microsoft Threat Intelligence · · International

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections, and mitigations. The post Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks appeared first on Microsoft Security Blog.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
BleepingComputer · · International

Quest Diagnostics confirms data breach exposed patient records

American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system. [...]

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare#security Read original →
Breach
The Record · · International

Quest Diagnostics warns of potential data theft after attack on lab service system

Quest Diagnostics has disclosed that a system used in its laboratory services may have been compromised, potentially exposing patient data. The nationwide diagnostics company has not confirmed the full scope of what was taken.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
HIPAA Journal · · US Federal

Washington Gastroenterology Pays $4.6 Million to Settle Data Breach Lawsuit

Washington Gastroenterology has agreed to a $4.6 million settlement to resolve a class action lawsuit arising from a cybersecurity incident at the medical practice. The settlement follows litigation brought by patients affected by the breach.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →
Breach
HIPAA Journal · · US Federal

UltraMobile Imaging Identifies Data Breach Impacting 75,000 Individuals

UltraMobile Imaging, a New York-based medical imaging provider, disclosed a data breach affecting approximately 75,000 individuals. The announcement is part of a wave of healthcare-related breach disclosures also involving Artistic Smiles in Colorado and Parkview Health in Indiana.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →