Data Breaches Reported by Sunshine Health; Health Payment Systems
Sunshine Health, a Florida-based Medicaid and health insurance agency, has reported a data breach involving the theft of protected health information following a vishing attack. Health Payment Systems has also disclosed a separate breach.
Why this matters: Vishing is a phone scam, and it just worked on a company holding Medicaid patients' medical records. These are not people with a lot of options about who manages their health data. They did not choose Sunshine Health the way you choose a bank. The state chose it for them. When a voice call is enough to break into a system storing that kind of information, the security controls were not serious enough for the data being protected.
Who should care: Healthcare professionals · Privacy officers · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.