The full corpus — beyond today's front page.
78 results · page 2 of 4
AnMed, a nonprofit health system operating across upstate South Carolina and Northeast Georgia, has shut down close to 80 facilities while responding to a cyberattack. The scale of the closure points to serious disruption across a regional system that serves a wide patient population.
Who should care: Healthcare professionals · Privacy officers · Compliance
MCBS, LLC, a healthcare management and revenue cycle services company based in Augusta, Georgia, has disclosed a cybersecurity incident affecting approximately 1.26 million individuals. The company works in revenue cycle management, meaning it processes sensitive patient financial and health data on behalf of healthcare providers.
Who should care: Healthcare professionals · Privacy officers · Compliance
U.S. private equity firm TPG has acquired Optum UK, the company behind the electronic patient record system used by most GP practices in England, in a deal valued at approximately £300 million. The acquisition means a American private equity firm will now control the health records of millions of NHS patients, prompting concern from doctors and MPs.
Who should care: Healthcare professionals · Privacy officers · Compliance
Four healthcare facilities — Wildwood Surgical Center, Michigan Surgical Center, Penobscot Valley Hospital, and Whitfield Regional Hospital — have each disclosed separate data breaches. The incidents were reported in the HIPAA Journal, though the scope, timing, and nature of each breach have not been detailed in the available information.
Who should care: Healthcare professionals · Privacy officers · Compliance
Author and national security reporter Annie Jacobsen argues that AI is simultaneously lowering the barrier for creating biological weapons and offering new tools for disease surveillance and public health response. She calls for urgent investment in AI-powered defensive systems to keep pace with the offensive capabilities the technology enables.
Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy
A new report tracking data breach trends finds that malicious insider incidents are rising, and that large-scale 'mega breaches' are becoming more common. The current year is on pace to continue or exceed recent records in overall breach volume, according to findings covered by The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
DentaQuest, a dental benefits administrator, is notifying more than 15 million people that their information was compromised in a cybersecurity incident that occurred in May 2026. The company has begun sending notification letters to those affected.
Who should care: Healthcare professionals · Privacy officers · Compliance
Clover Health Investments has filed an SEC disclosure reporting a cybersecurity incident, identified in July, that involved social engineering. The company says it is still assessing the scope and impact of the breach.
Who should care: Healthcare professionals · Privacy officers · Compliance
Craneware, a healthcare technology company that provides financial and operational software to hospitals and health systems, is investigating a cyberattack and has confirmed that a significant volume of data was compromised. The full scope of the breach has not yet been disclosed.
Who should care: Healthcare professionals · Privacy officers · Compliance
The U.S. Department of Health and Human Services, through CMS and the CDC, has issued a request for public input on possible updates to the Clinical Laboratory Improvement Amendments regulations, which govern quality standards for laboratory testing across the country.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
The Office of Management and Budget has published its 2026 Unified Agenda, laying out the regulatory actions federal agencies plan to propose or finalize this year. Among the items flagged are several HHS rules touching on health privacy, interoperability, and data exchange.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · Policy
The healthcare giant Abbott is investigating claims from two threat groups who allege cyberattacks and data theft, one involving legacy […] The post Abbott Investigating Cyberattack Claims From Two Threat Actors appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Mozilla research found that Stardust, a period tracking app, shares users' health data with a third-party analytics firm. The findings reveal significant variation in privacy practices across period tracker apps, with at least one app handling data responsibly while Stardust did not.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Three healthcare organizations — Ohio Living, a senior living provider, Erlanger Health System in Tennessee, and Heart of America Eye Care — have each disclosed separate data breaches. All three operate in sectors covered by HIPAA, meaning the compromised data likely includes sensitive medical and personal information.
Who should care: Healthcare professionals · Privacy officers · Compliance
A review of popular wearable devices — including Oura Ring, Apple Watch, Garmin, and Whoop — finds that most fall short on basic privacy and security standards, lacking transparency reports and strong encryption options despite collecting continuous personal health data from roughly 40 percent of Americans.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Community Health Center of Buffalo and New Jersey law firm Greenbaum Rowe Smith & Davis have each disclosed separate data breaches. The incidents, reported via The HIPAA Journal, involve organizations that handle sensitive medical and legal information respectively.
Who should care: Healthcare professionals · Privacy officers · Compliance
A piece from The HIPAA Journal examines the growing compliance burden on the medical device industry, pointing to the sector's expanding presence in everyday healthcare settings and the regulatory expectations that follow.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
A new study found that most healthcare websites deploy third-party marketing and analytics tools that could expose sensitive patient information to outside companies. The findings point to a systemic gap between what healthcare sites collect and what patients reasonably expect about who sees their data.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
Three healthcare organizations — ERMI, a Georgia medical equipment company; McLeod Physician Associates in South Carolina; and Centers for Dialysis Care — have each announced separate data breaches. All three operate in sectors that handle sensitive patient health information covered under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance
Federal regulators have extended the timeline for HIPAA-regulated entities to comply with proposed updates to the HIPAA Security Rule, giving covered organizations additional time to prepare for the changes. The postponement applies broadly to entities subject to HIPAA, including healthcare providers, insurers, and their business associates.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
A guide from The HIPAA Journal addresses how small medical practice owners bear direct legal responsibility for HIPAA compliance, even when routine compliance tasks are delegated to staff or third parties. The piece outlines how that personal accountability shapes what a functioning compliance program needs to look like.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
CISA has launched the ANCHOR-CI framework, a new alliance aimed at deepening partnerships and improving information sharing between government and the private sector to protect critical infrastructure from cyber threats.
Who should care: Healthcare professionals · Privacy officers · Compliance
AdaptHealth, a publicly traded home medical equipment and supplies company, has disclosed a cybersecurity incident it has classified as material, involving the theft of patient data. The breach affects customers who rely on the company for home health products including diabetes supplies and sleep therapy equipment.
Who should care: Healthcare professionals · Privacy officers · Compliance
Two women's health clinics — one in Delaware, one in Florida — have disclosed separate data breach incidents involving unauthorized access to or retention of patient information. Both providers are covered under HIPAA, which governs the handling of sensitive health data.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy