The full corpus — beyond today's front page.
131 results · page 2 of 6
The Department of Veterans Affairs is dramatically increasing its contract ceiling with Oracle for an electronic health record modernization project, with costs now projected at $48 billion — nearly five times the original $10 billion estimate.
Who should care: Healthcare professionals · Privacy officers · Compliance
The House Veterans' Affairs Committee voted unanimously to subpoena Oracle Chairman Larry Ellison and CEO Mike Sicilia after the Department of Veterans Affairs proposed increasing its contract with Oracle by $17 billion, raising concerns about the cost trajectory of the agency's electronic health records overhaul.
Who should care: Healthcare professionals · Privacy officers · Compliance
A House committee has subpoenaed Oracle founder Larry Ellison over the company's troubled project to modernize health records for U.S. veterans, a decade-long effort that has drawn frustration from lawmakers on both sides of the aisle.
Who should care: Healthcare professionals · Privacy officers · Compliance
Nutex Health, a Houston-based healthcare company operating dozens of micro-hospitals and specialty facilities, has confirmed that sensitive data was stolen during a cyberattack in August. The company manages care across 27 locations, meaning the breach likely affects patients across multiple sites.
Who should care: Healthcare professionals · Privacy officers · Compliance
A Department of Defense Inspector General audit found that the Pentagon continues to fail at protecting the electronic health records of senior government officials. The findings indicate the security lapses are ongoing, not new.
Who should care: Healthcare professionals · Privacy officers · Compliance
Multiple rehabilitative care practices, senior living facilities, and skilled nursing providers in North Carolina have disclosed data breaches resulting from hacking incidents. The announcements follow a pattern of cyberattacks targeting healthcare organizations that handle sensitive patient information.
Who should care: Healthcare professionals · Privacy officers · Compliance
McKesson, one of the largest healthcare distribution companies in the United States, disclosed a cyberattack in a regulatory filing with the SEC. Hacking group ShinyHunters is claiming responsibility and alleges it stole 284 million records from the company.
Who should care: Healthcare professionals · Privacy officers · Compliance
A new category of minimalist wearables is emerging that tracks health data passively, without the constant alerts and screen interactions that have made smartwatches feel intrusive. The pitch is less distraction, but the devices still collect continuous biometric data.
Who should care: Healthcare professionals · Privacy officers · Compliance
Boston Scientific, a major Massachusetts-based medical device and biomedical engineering company, has disclosed a cyberattack that is disrupting some of its information technology systems. The company has not yet detailed the scope of the breach or what data may be involved.
Who should care: Healthcare professionals · Privacy officers · Compliance
A new guide aims to make HIPAA compliance accessible to small medical practices without requiring legal expertise. The resource is designed to help smaller healthcare providers understand and meet federal patient privacy obligations on their own.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
More than a dozen U.S. health care systems have issued warnings to patients about an ongoing phishing campaign involving emails […] The post Health Systems Warn Patients About Epic MyChart Patient Portal Phishing Scam appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Paylogix, a company that manages employee benefits, has notified regulators that hackers accessed and stole sensitive financial and health information belonging to tens of thousands of people.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
The Trump administration has walked back an earlier directive to hospitals requiring participation in a federal injury surveillance system, now telling them the program is voluntary. The shift follows reporting that revealed earlier correspondence had characterized hospital participation as mandatory.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity · General readers · Policy
The Department of Veterans Affairs has deployed its new electronic health records system at three Indiana-based medical facilities, bringing the total number of rollouts in the current year to eleven.
Who should care: Healthcare professionals · Privacy officers · Compliance
Alberta has made changes to its Health Information Act, with updates touching on privacy impact assessments, shared custody arrangements, and the use of artificial intelligence in handling health data.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
The Department of Veterans Affairs has expanded its electronic health records modernization contract with Oracle, raising the total value to nearly $27 billion. The modification represents a roughly $17 billion increase to the existing agreement.
Who should care: Healthcare professionals · Privacy officers · Compliance
The U.S. Senate is considering legislation that would strengthen privacy protections for health data collected by consumer wearables such as the Apple Watch. The move would extend health privacy rules beyond traditional medical providers to cover the growing market of personal health tracking devices.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
The Social Security Administration has expanded a system that pulls structured electronic health records directly from providers, giving the agency near-instant access to medical data for people applying for disability benefits. The goal is to cut the notoriously long wait times for disability claim decisions.
Who should care: Healthcare professionals · Privacy officers · Compliance
American Addiction Centers in Tennessee and Oculus Pathology in Texas have each disclosed separate hacking incidents. Both organizations operate in healthcare, meaning the breached data likely includes sensitive medical and personal information covered under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance
A large-scale audit of over 80,000 online review responses from nearly 4,000 medical and dental practices found an estimated 21,000 public replies that likely disclosed patient information in violation of HIPAA. The violations were not hidden in back-end systems — they were sitting in publicly visible responses to patient reviews.
Who should care: Healthcare professionals · Privacy officers · Compliance
A Beverly Hills plastic surgeon has confirmed a data theft and extortion incident, joining a string of recent healthcare data breaches that also include SunCloud Health, Minnesota ENT, and several other medical providers.
Who should care: Healthcare professionals · Privacy officers · Compliance
Quantum Health, a healthcare navigation and care coordination company, disclosed a data breach after a vishing attack — a voice-based social engineering scheme — gave threat actors unauthorized access to its network. Heart of America Medical Center was also named in connection with recent breach announcements.
Who should care: Healthcare professionals · Privacy officers · Compliance
Five healthcare organizations covered under HIPAA have disclosed data breaches, including the Women's Center for Radiology in Florida and Optalis Management Solutions in Michigan, along with three other named entities. The announcements follow standard breach notification requirements under federal health privacy law.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
The Department of Veterans Affairs is seeking to extend its electronic health records contract with Oracle through 2031, citing the need to continue deployment across VA medical centers until all facilities have fully transitioned to the new system.
Who should care: Healthcare professionals · Privacy officers · Compliance