The full corpus — beyond today's front page.
228 results · page 3 of 10
The U.S. Department of Health received reports of 77 healthcare data breaches in July 2026, each involving 500 or more individuals. The figures come from mandatory disclosures tracked by the HIPAA Journal.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The UK government has released a strategy outlining how AI in healthcare will be regulated, with legal analysis identifying ten key takeaways from the framework. The strategy signals an intent to bring structure to how AI tools are deployed and overseen across the health sector.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
Photon Health, a New York-based healthcare technology company, and Healthcare Highways, a Texas-based medical provider network, have each disclosed data security incidents. Details on the scope, timing, and types of data affected have not been specified in available reporting.
Who should care: Healthcare professionals · Privacy officers · Compliance
Secure Healthcare Information Management, a Pennsylvania medical billing and management company, and Desert Orthopaedic Center have each disclosed data breaches. Both organizations operate in healthcare, where the data involved typically includes sensitive patient and financial records.
Who should care: Healthcare professionals · Privacy officers · Compliance
A UK government AI minister has warned that a cyberattack on Britain's public systems, similar to an AI-driven breach of Australia's Medicare healthcare data, is likely or even inevitable. The minister acknowledged that British cyber defences may not be equipped to stop increasingly capable AI-powered attacks.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Etairos Health has agreed to settle a class action lawsuit tied to a ransomware attack and data breach that occurred in February 2024. The settlement resolves litigation brought against the healthcare company following the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Bacon County Health Services in Georgia is investigating a cyber incident, and several other healthcare organizations — including Comprehensive Orthopaedics & Musculoskeletal Care in Connecticut — have also disclosed data breaches around the same time.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Belarusian Cyber Partisans have confirmed they were behind a 2023 intrusion into the Moscow Department of Health's network, acknowledging they maintained access inside the system for an extended period. The admission came after Russian researchers had already attributed the breach to the group.
Who should care: Cybersecurity · Privacy officers · Administrators
Casper Orthopedic Associates in Wyoming and Atlantic Digestive Specialists in New Hampshire have each disclosed data breaches. Both are healthcare providers, meaning the exposed information is likely to include sensitive patient medical records.
Who should care: Healthcare professionals · Privacy officers · Compliance
The U.S. Senate passed the Health Care Cybersecurity and Resiliency Act of 2026 by unanimous consent, a bill that would expand federal cybersecurity requirements for healthcare organizations. The legislation follows the Change Healthcare breach, which affected an estimated 190 million people.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
An analysis of medical devices found that most cannot support post-quantum cryptography, leaving healthcare organizations exposed to future attacks from quantum computing. Only a fraction of devices in use today have the hardware or software capacity to handle the transition to stronger encryption standards.
Who should care: Healthcare professionals · Privacy officers · Compliance
Norway is drafting legislation to temporarily ban camera-enabled smart glasses in a wide range of public spaces, including parks, beaches, gyms, schools, and healthcare facilities. The move follows similar restrictions in the UK and US, driven by concern over covert recording enabled by AI-equipped wearable devices.
Who should care: General readers · AI governance · Policy
Nueva EPS, Colombia's largest health-promoting entity, has allegedly been breached by an attacker demanding $15 million to withhold stolen data. The organization plays a central role in the country's healthcare system, overseeing delivery and implementing national health guidelines.
Who should care: Cybersecurity · Privacy officers · Administrators
The U.S. Senate passed the Health Care Cybersecurity and Resiliency Act by unanimous vote, a bipartisan measure aimed at strengthening cybersecurity defenses and resilience across the healthcare sector.
Who should care: Healthcare professionals · Privacy officers · Compliance
Italy's data protection authority has fined IQVIA Solutions Italy €7 million after finding that health data belonging to roughly one million patients of 800 family doctors was not properly anonymized, in violation of data protection rules.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy
The Senate passed the Health Care Cybersecurity and Resilience Act by unanimous consent, a bipartisan measure designed to help hospitals and healthcare providers improve their cybersecurity defenses and better protect patient data.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Epic Systems, the company behind the widely used MyChart patient portal, has halted most of its product development to address security vulnerabilities that could expose patient data. The decision, confirmed by founder and CEO Judy Faulkner, signals an unusual prioritization of security over new features.
Who should care: Healthcare professionals · Privacy officers · Compliance
A legal briefing from Simmons & Simmons addresses AI governance obligations for healthcare operators in Luxembourg, covering what those running AI systems in that sector need to understand about compliance and regulatory expectations.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
New reporting suggests that patient concerns about data privacy may discourage adoption of AI tools in healthcare settings. The worry is that people will avoid potentially useful medical AI rather than risk losing control of their health information.
Who should care: General readers · AI governance · Policy · Privacy officers
Saber Healthcare, an Ohio-based care provider, and Buchalter, a California law firm, have each announced separate data breaches. Both organizations handle sensitive personal and legal information, making the incidents significant for the individuals they serve.
Who should care: Healthcare professionals · Privacy officers · Compliance
A new industry membership gives healthcare ad customers added assurance on data privacy Stock Titan
Who should care: General readers · Privacy officers · Policy
A new report covering the first half of 2026 shows healthcare data breaches dropped roughly 6% compared to the same period in 2025, according to the HIPAA Journal's mid-year analysis.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Citrix has released patches for two critical zero-day vulnerabilities in NetScaler ADC and NetScaler Gateway that are being actively exploited in the wild. The flaws affect widely used network access and application delivery products common in enterprise and healthcare environments.
Who should care: Healthcare professionals · Privacy officers · Compliance
Astrana Health, a managed care services company serving healthcare providers, has filed a disclosure with the SEC reporting a social engineering incident. The filing indicates the company experienced a security event in which attackers likely manipulated people rather than systems to gain access.
Who should care: Healthcare professionals · Privacy officers · Compliance