PrivacySignal
Healthcare

Insider Data Theft Incident Reported by Premise Health

HIPAA Journal · · US Federal · Healthcare Privacy

Premise Health Holding Corp disclosed that a former employee copied patient data without authorization. The company reported the incident as a data security breach affecting health information.

Why this matters: Most data breach coverage focuses on outside hackers. This one came from inside. A former employee walked out with patient data, which is a different kind of problem. Healthcare workers have legitimate access to sensitive records during their jobs. That access does not disappear the moment someone decides to misuse it. Premise Health serves employer-based clinics, so the people exposed may not even know who holds their medical records. Patients rarely get to choose their employer's health provider, which means they had no say in this risk.

Who should care: Healthcare professionals · Privacy officers · Compliance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Healthcare
HIPAA Journal · · US Federal

CISA Seeks More Granular Information on Cyber Incidents

CISA has released an updated cyber incident reporting form that requests more detailed information from organizations disclosing breaches and attacks. The revised form appears designed to give the agency a clearer picture of incidents affecting critical infrastructure and other covered entities.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

OSHA Medical Courier Training Online

The HIPAA Journal is offering online OSHA training for medical couriers, structured as three self-paced courses each ending in a certificate.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Cybercriminals Hit Two California Dental Practices

Two California dental practices, Santa Barbara Endodontics and Hollister Family Dental & Implant Center, have disclosed data security incidents involving cybercriminals. Both announcements were reported by The HIPAA Journal.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Healthcare Providers Discover Unauthorized PHI Disclosures to AI Tools

At least two healthcare providers have reported data privacy incidents in which patient health information was uploaded to AI tools without authorization. The disclosures were announced separately and involve protected health information shared outside approved channels.

Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy

#healthcare#ai-governance#ai#privacy Read original →