PrivacySignal
Healthcare

American Addiction Centers & Oculus Pathology Disclose Hacking Incidents

HIPAA Journal · · US Federal · Healthcare Privacy

American Addiction Centers in Tennessee and Oculus Pathology in Texas have each disclosed separate hacking incidents. Both organizations operate in healthcare, meaning the breached data likely includes sensitive medical and personal information covered under HIPAA.

Why this matters: Addiction treatment records are some of the most sensitive data a person can have on file. A breach there is not like a retailer losing your email address. It can expose diagnoses, treatment history, and personal details people shared under the assumption of strict medical privacy. Pathology records carry similar weight. When healthcare organizations get hacked, real people face real risks — discrimination, stigma, and loss of control over information they never wanted anyone else to see. Who is accountable for locking this down matters.

Who should care: Healthcare professionals · Privacy officers · Compliance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

Healthcare
HIPAA Journal · · US Federal

We Reviewed 80,300 Healthcare Review Replies. The HIPAA Risk Was Hiding in Plain Sight

A large-scale audit of over 80,000 online review responses from nearly 4,000 medical and dental practices found an estimated 21,000 public replies that likely disclosed patient information in violation of HIPAA. The violations were not hidden in back-end systems — they were sitting in publicly visible responses to patient reviews.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Data Theft/Extortion Incident Confirmed by Beverly Hills Plastic Surgeon

A Beverly Hills plastic surgeon has confirmed a data theft and extortion incident, joining a string of recent healthcare data breaches that also include SunCloud Health, Minnesota ENT, and several other medical providers.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Vishing Attack Provides Threat Act with Access to Quantum Health Network

Quantum Health, a healthcare navigation and care coordination company, disclosed a data breach after a vishing attack — a voice-based social engineering scheme — gave threat actors unauthorized access to its network. Heart of America Medical Center was also named in connection with recent breach announcements.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Data Breaches Announced by Five HIPAA-Regulated Entities

Five healthcare organizations covered under HIPAA have disclosed data breaches, including the Women's Center for Radiology in Florida and Optalis Management Solutions in Michigan, along with three other named entities. The announcements follow standard breach notification requirements under federal health privacy law.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#regulation Read original →
Healthcare
Nextgov/FCW · · US Federal

VA seeks to extend its Oracle health record contract through 2031

The Department of Veterans Affairs is seeking to extend its electronic health records contract with Oracle through 2031, citing the need to continue deployment across VA medical centers until all facilities have fully transitioned to the new system.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
DataBreaches.net · · International

CA: Snoopers Beware; NL’s Privacy Commissioner Recommends Naming Individuals in Snooping-Related Breaches

Newfoundland and Labrador's Privacy Commissioner is recommending that public bodies disclose the names of employees responsible for snooping-related privacy breaches to the people whose records were accessed. The recommendation follows an incident in which an NL Health Services employee viewed a patient's health record without authorization.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →