The full corpus — beyond today's front page.
151 results · page 3 of 7
DAP Health, a nonprofit community health network in Southern California, has agreed to a $1.3 million settlement to resolve a class action lawsuit stemming from a data breach. The case was reported by The HIPAA Journal, which covers healthcare privacy and compliance news.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
CareCloud, a U.S. healthcare IT company, disclosed that a data breach it experienced earlier this year affected more than 3.7 million individuals. The company provides technology and services to medical practices and healthcare organizations.
Who should care: Cybersecurity · Privacy officers · Administrators
CareCloud, a healthcare software company, reported a data breach affecting nearly 3.8 million people after an unauthorized party accessed one of its electronic health record systems for approximately eight hours. The company disclosed the incident to the Department of Health and Human Services.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The U.S. Senate is considering legislation that would strengthen privacy protections for health data collected by consumer wearables such as the Apple Watch. The move would extend health privacy rules beyond traditional medical providers to cover the growing market of personal health tracking devices.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
HCI Innovation Group has published material addressing the future of AI governance and data analytics in healthcare, a sector under growing pressure to balance technological adoption with patient data protections.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
American Addiction Centers in Tennessee and Oculus Pathology in Texas have each disclosed separate hacking incidents. Both organizations operate in healthcare, meaning the breached data likely includes sensitive medical and personal information covered under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance
A large-scale audit of over 80,000 online review responses from nearly 4,000 medical and dental practices found an estimated 21,000 public replies that likely disclosed patient information in violation of HIPAA. The violations were not hidden in back-end systems — they were sitting in publicly visible responses to patient reviews.
Who should care: Healthcare professionals · Privacy officers · Compliance
A ransomware group called Chaos claims to have published 235 gigabytes of protected health information and internal documents allegedly taken from Healthcare Highways, a medical provider network company. The data was posted to a dedicated leak site after an apparent deadline passed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Polish authorities are investigating a breach at MyDr, a healthcare software provider serving doctors and clinics across the country. The company says it has identified and resolved the cause and put additional security measures in place, but the incident may have exposed data tied to as many as 19 million people.
Who should care: Cybersecurity · Privacy officers · Administrators
A piece in SC Media argues that regulated industries — sectors like finance, healthcare, and insurance — face particular risks when they build AI systems without treating data privacy as a core requirement rather than an afterthought.
Who should care: Lawyers · Compliance · General readers · AI governance · Policy · Privacy officers
A Beverly Hills plastic surgeon has confirmed a data theft and extortion incident, joining a string of recent healthcare data breaches that also include SunCloud Health, Minnesota ENT, and several other medical providers.
Who should care: Healthcare professionals · Privacy officers · Compliance
Quantum Health, a healthcare navigation and care coordination company, disclosed a data breach after a vishing attack — a voice-based social engineering scheme — gave threat actors unauthorized access to its network. Heart of America Medical Center was also named in connection with recent breach announcements.
Who should care: Healthcare professionals · Privacy officers · Compliance
Organizations working with AI are drawing practical lessons about how to govern the technology as deployments move from pilot to production. The specifics vary by sector, but the pattern points to a field still figuring out accountability, oversight, and risk management in real time.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
The Boston Healthcare for the Homeless Program has disclosed a data breach affecting at least 185,000 Massachusetts residents, according to a report that also notes breaches at Monongalia County General Hospital and other healthcare organizations.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A 2026 analysis argues that responsibility for governing AI in healthcare settings is landing on clinicians rather than on institutions, regulators, or technology companies.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Aesto Health, a healthcare technology company based in Birmingham, Alabama, has disclosed a data security incident that affected multiple healthcare provider clients. The breach was reported by The HIPAA Journal, though specific details about the number of patients affected or the nature of the compromised data have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Five healthcare organizations covered under HIPAA have disclosed data breaches, including the Women's Center for Radiology in Florida and Optalis Management Solutions in Michigan, along with three other named entities. The announcements follow standard breach notification requirements under federal health privacy law.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
Two healthcare providers, Highland Health Systems and Albany Gastroenterology Consultants, have reached preliminary settlements in class action lawsuits stemming from data breaches. Courts have given initial approval to both settlements, moving the cases toward resolution for affected patients.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Marianne Kolbasuk McGee reports: A Canadian hospital is dealing with a ransomware attack on its facility management systems that has affected the building’s doors and heating, ventilation and air conditioning equipment. Some experts said the incident underscores growing cyberthreats involving operational technology in healthcare. The attack this week on Manitoba, Ontario’s largest hospital – Winnipeg’s... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Courts overseeing multidistrict litigation stemming from the 2024 Change Healthcare ransomware attack have established strict rules governing how the stolen dataset can be used in proceedings, reflecting the extraordinary volume and sensitivity of the compromised health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
MyDr, one of Poland's largest healthcare system providers, is investigating a security breach after attackers claimed to have accessed patient data from multiple Polish clinics. The alleged hackers say they obtained nearly 18.8 million unique PESEL numbers, Poland's national identification numbers used across government and financial services.
Who should care: Healthcare professionals · Privacy officers · Compliance
Five small healthcare organizations have disclosed security incidents that exposed patient data, according to reporting by The HIPAA Journal. The organizations were not named in the excerpt beyond one partial reference, but all involve breaches of protected health information.
Who should care: Healthcare professionals · Privacy officers · Compliance
CISA, the FBI, and international partners have issued a joint advisory warning healthcare organizations about Gunra, a ransomware-as-a-service operation actively targeting the sector.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A commentary in The Guardian argues that AI tools used in medical training pose a risk beyond deskilling experienced doctors — that students and residents may never develop independent clinical judgment in the first place, because they are reaching for AI before foundational reasoning skills are built.
Who should care: General readers · AI governance · Policy