The full corpus — beyond today's front page.
196 results · page 2 of 9
Four vulnerabilities have been identified in HAPI FHIR, the open-source Java library and server framework that implements the HL7 FHIR […] The post Multiple Vulnerabilities Identified in Component Used by Smile Digital Health’s Smile CDR appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Blue Team Alpha, a cybersecurity firm partnered with The HIPAA Journal, is offering a free, no-obligation 30-minute consultation to help organizations review their cybersecurity priorities.
Who should care: Healthcare professionals · Privacy officers · Compliance
Quest Diagnostics, a major U.S. diagnostic testing company, has disclosed to the SEC that patient data was likely accessed in a cyberattack. The company has not yet detailed the scope or type of information involved.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Massachusetts Attorney General has reached a settlement with Transformative Healthcare over alleged violations of HIPAA and MassHealth fraud rules. The case involves a healthcare provider facing both federal privacy law and state Medicaid program allegations.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
The U.S. Department of Health and Human Services' Office of the National Coordinator for Health IT has sent letters of nonconformity to parties suspected of blocking the lawful sharing of electronic health information, a practice prohibited under federal rules.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Berlin Institute of Health is hosting a lecture series focused on health data privacy, covering perspectives and challenges in the field.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
The Trump administration is pushing to integrate AI into Medicare, a move that is drawing scrutiny over how patient health data will be used and protected. The initiative affects one of the largest government health programs in the country, covering tens of millions of older and disabled Americans.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
Freedom of information responses show that many NHS trusts across England are declining to use Palantir's £330 million federated data platform, with health officials saying existing or alternative systems perform just as well or better. Some trusts have reported genuine benefits, including improved waiting list and surgery scheduling management, but adoption is far from uniform.
Who should care: Healthcare professionals · Privacy officers · Compliance
Cyberattacks targeting healthcare organizations are rising in frequency and cost, and are increasingly disrupting the delivery of patient care, according to reporting from The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
The US Army is moving to address a policy that has blocked military parents from accessing the medical records of their teenage children, ages 13 to 18. The barrier has created friction for families navigating healthcare within the military system.
Who should care: Healthcare professionals · Privacy officers · Compliance
A user of MyChart, the widely used patient portal, found that while the platform offered an opt-out from health data sharing, actually completing that opt-out was a confusing and frustrating process.
Who should care: Healthcare professionals · Privacy officers · Compliance
A patient attempting to opt out of health data sharing through MyChart and a major hospital encountered significant obstacles, including misinformation from staff, a notary requirement, and a hospital that reportedly failed to follow its own stated policies.
Who should care: Healthcare professionals · Privacy officers · Compliance
A high-severity zero-day vulnerability in Ivanti Connect Secure, a widely used enterprise SSL VPN product, has been actively exploited in attacks. The flaw allows attackers to bypass authentication, meaning they can gain access without valid credentials.
Who should care: Healthcare professionals · Privacy officers · Compliance
Senior Democratic lawmakers on the House and Senate Veterans' Affairs committees are pressing the Department of Veterans Affairs to explain why its electronic health records modernization contract grew from its original value to roughly $17 billion, calling the agency's stated rationale of 'unanticipated complexities' insufficient.
Who should care: Healthcare professionals · Privacy officers · Compliance
Photon Health, a New York-based healthcare technology company, and Healthcare Highways, a Texas-based medical provider network, have each disclosed data security incidents. Details on the scope, timing, and types of data affected have not been specified in available reporting.
Who should care: Healthcare professionals · Privacy officers · Compliance
Secure Healthcare Information Management, a Pennsylvania medical billing and management company, and Desert Orthopaedic Center have each disclosed data breaches. Both organizations operate in healthcare, where the data involved typically includes sensitive patient and financial records.
Who should care: Healthcare professionals · Privacy officers · Compliance
Changes to the login process for the Military Health System portal have left military spouses unable to access their own medical records and those of their children. The authentication update appears to have created access barriers for dependents of service members.
Who should care: Healthcare professionals · Privacy officers · Compliance
Bacon County Health Services in Georgia is investigating a cyber incident, and several other healthcare organizations — including Comprehensive Orthopaedics & Musculoskeletal Care in Connecticut — have also disclosed data breaches around the same time.
Who should care: Healthcare professionals · Privacy officers · Compliance
A Pennsylvania dental practice, Shen Smiles, has agreed to pay $140,000 to settle HIPAA Privacy Rule violations. The agreement involves the practice's owner and operator, Dr. Linda L. Shen.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · Policy
iRhythm, a health technology company known for its Zio wearable ECG monitor, has begun notifying individuals affected by a hacking incident that occurred in June 2026. The company specializes in cardiac monitoring devices that collect continuous heart data from patients.
Who should care: Healthcare professionals · Privacy officers · Compliance
Casper Orthopedic Associates in Wyoming and Atlantic Digestive Specialists in New Hampshire have each disclosed data breaches. Both are healthcare providers, meaning the exposed information is likely to include sensitive patient medical records.
Who should care: Healthcare professionals · Privacy officers · Compliance
An analysis of medical devices found that most cannot support post-quantum cryptography, leaving healthcare organizations exposed to future attacks from quantum computing. Only a fraction of devices in use today have the hardware or software capacity to handle the transition to stronger encryption standards.
Who should care: Healthcare professionals · Privacy officers · Compliance
Citrix has issued a patch for a third actively exploited zero-day vulnerability in its NetScaler product, releasing the fix within days of addressing two previous flaws that were also under active attack.
Who should care: Healthcare professionals · Privacy officers · Compliance
Many organizations publish privacy policies that do not reflect what their websites actually do, because compliance teams often lack full visibility into the third-party tools running on their sites, what data those tools collect, and where that data goes.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · Policy