British Scattered Spider Hacker Pleads Guilty to Cyberattacks on TfL; SSM Health Care; Sutter Health

UK: Boy’s medical records may have been accessed inappropriately after crocodile attack at zoo

They could have — and should have — anticipated great curiosity about this particular patient’s medical records. Did they control access well enough? Emily Stevens reports: The medical records of a young boy who was attacked by a crocodile at a Cambridgeshire zoo were accessed by up to 40 members of staff. The incident took... Source

Who should care: Healthcare professionals · Privacy officers · Compliance

High-Severity Vulnerability Identified in OHIF Viewers DICOM

A high-severity vulnerability has been identified in OHIF (Open Health Imaging Foundation) Viewers DICOM, which could be exploited to steal […] The post High-Severity Vulnerability Identified in OHIF Viewers DICOM appeared first on The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

Why You Don’t Need to Understand HIPAA to Make Your Small Practice HIPAA Compliant

A small practice owner who cannot define a Security Risk Analysis, has never read the HIPAA Security Rule, and does […] The post Why You Don’t Need to Understand HIPAA to Make Your Small Practice HIPAA Compliant appeared first on The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

Colorado Health Network; Kentucky Mountain Health Alliance Announce Data Breaches

Data security incidents have been announced by the Colorado Health Network and Kentucky Mountain Health Alliance. In both cases, only […] The post Colorado Health Network; Kentucky Mountain Health Alliance Announce Data Breaches appeared first on The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

Minnesota Epilepsy Group; Campbell University; City of Middletown Announce Data Breaches

Data breaches have been announced by Minnesota Epilepsy Group, Campbell University, and the City of Middletown, Ohio. Minnesota Epilepsy Group […] The post Minnesota Epilepsy Group; Campbell University; City of Middletown Announce Data Breaches appeared first on The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

Newsletter Digest - news from the EDPS

The European Data Protection Supervisor has released a newsletter covering four priority areas: the European Commission's Digital Omnibus legislative debate, cross-border health data protection, privacy safeguards for the EU Visa Application Platform's chatbot, and transparency in EU funding.

Why this matters: The topics signal active regulatory scrutiny over sensitive data flows — health records, visa applications, and public spending — areas where individuals' personal information intersects directly with government systems and cross-border institutional access.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · AI governance · General readers · Policy