The full corpus — beyond today's front page.
151 results · page 4 of 7
Healthcare software company Unlimited Technology Systems disclosed a data breach from October 2025 that affected more than 3.8 million people. The company has reported the incident, though details about the type of data exposed have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators
UPMC and KLAS Research have released a study examining how healthcare organizations are adopting AI and what governance barriers are slowing or shaping that process.
Who should care: General readers · AI governance · Policy
Five healthcare providers have reached settlements in class action lawsuits tied to their use of website tracking pixels, part of a broader wave of similar legal actions against the healthcare sector over the past 18 months.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
Unlimited Technology Systems, an Ohio-based revenue cycle management company serving healthcare providers, suffered a data breach in October 2025 that exposed information belonging to approximately 3.8 million patients. The breach was discovered days after it occurred and publicly reported months later.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Cardiology Associates of Port Huron has not publicly responded to claims by a threat group called Orova that it hacked the medical practice and stole patient data in June. The group, one of roughly four dozen new actors targeting U.S. healthcare in early 2026, listed the cardiology practice on a dark web leak site.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Class action lawsuits stemming from data breaches at McKenzie Health System in Michigan and Aspire Health Alliance have reached settlement agreements. Both cases involved healthcare organizations whose patient data was compromised, prompting litigation that has now been resolved outside of court.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Omni Healthcare Financial Holdings and Western Montana Clinic have each agreed to settle class action lawsuits stemming from separate data breaches. The settlements resolve claims brought by individuals whose personal or medical information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The HIPAA Journal is prompting healthcare organizations to evaluate their readiness for security incidents by conducting formal risk assessments that identify threats to protected health information and gauge the likelihood those threats materialize.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Amgen has disclosed to regulators that patient information and proprietary company data were accessed through a breach affecting third-party cloud systems the company relied on. The incident adds to a growing pattern of healthcare and biotech firms suffering data losses through vendors rather than their own internal infrastructure.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
CareCloud, a New Jersey-based health technology company that provides electronic health records and related clinical services, has notified more than 345,000 patients that their data was stolen in a cyberattack. The company offers cloud-based and AI-assisted tools used by healthcare providers across the country.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
Spanish biopharmaceutical firm Diater has appeared on the dark web victim list published by the ransomware group DeadLock, which is using a double extortion strategy — encrypting data and threatening to publish it. The breach reportedly affects up to a decade of sensitive medical records belonging to patients and healthcare professionals.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Healthcare IT company CareCloud is notifying more than 350,000 people that their data was stolen after hackers accessed its AWS environment in March 2026, disrupting an electronic health record system within its CareCloud Health division. The company's investigation confirmed unauthorized access to patient and possibly provider information stored in that cloud environment.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Health-ISAC has issued a warning to healthcare organizations about a rise in successful data theft attacks attributed to the ShinyHunters threat group. The advisory signals that the group is actively targeting the health sector and making meaningful progress against its defenses.
Who should care: Healthcare professionals · Privacy officers · Compliance
Wellstar Health System has agreed to a $4.25 million settlement to resolve a data privacy lawsuit, pending judicial approval. The agreement would compensate individuals affected by the underlying privacy dispute involving the Georgia-based healthcare network.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
OSF Healthcare System has agreed to pay $552,250 to settle a HIPAA investigation by the HHS Office for Civil Rights. The settlement resolves findings related to OSF Healthcare and its affiliated covered entities, though the specific violations were not detailed in the available excerpt.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals
The HHS Office for Civil Rights has reached a settlement with OSF Healthcare and affiliated entities following a ransomware attack carried out in 2021 by a threat group called Xing Team. The investigation examined OSF's handling of the incident, including concerns about its notification timeline and response to affected individuals.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
The Federal Trade Commission has filed a lawsuit against telehealth company Hims & Hers, targeting the company's data privacy practices and billing conduct. The action signals continued federal scrutiny of how digital health platforms handle sensitive consumer information and subscription-style charges.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
A former CPA has been sentenced for laundering $5.3 million stolen from Children's Healthcare of Atlanta through a 2023 business email compromise attack targeting one of the hospital system's vendors. The fraud exploited payment processes between the healthcare organization and its supply chain.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Banner Health and LifeStance Health Group have each agreed to settle lawsuits stemming from their use of tracking pixels and similar technologies on their websites. The tools allegedly collected and shared patient data with third parties without proper authorization under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
Soniva Dental Care in Texas has disclosed a data breach affecting at least 30,000 patients, part of a wave of healthcare-sector incidents also involving Optalis Management Solutions in Michigan and CareCloud in New Jersey. The breaches were reported in The HIPAA Journal, which covers health data security and compliance.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Medical Computer Business Services (MCBS), a healthcare billing company, has disclosed a 2025 network breach that exposed sensitive information belonging to more than 1.26 million people. The company has not yet detailed what specific data was compromised or how long attackers had access.
Who should care: Cybersecurity · Privacy officers · Administrators
Patrick Lo is calling attention to the risks that come when AI is deployed in healthcare before governance structures are in place to manage it. His argument centers on the idea that speed of adoption and accountability frameworks are not keeping pace with each other.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
MCBS, LLC, a healthcare management and revenue cycle services company based in Augusta, Georgia, has disclosed a cybersecurity incident affecting approximately 1.26 million individuals. The company works in revenue cycle management, meaning it processes sensitive patient financial and health data on behalf of healthcare providers.
Who should care: Healthcare professionals · Privacy officers · Compliance
U.S. private equity firm TPG has acquired Optum UK, the company behind the electronic patient record system used by most GP practices in England, in a deal valued at approximately £300 million. The acquisition means a American private equity firm will now control the health records of millions of NHS patients, prompting concern from doctors and MPs.
Who should care: Healthcare professionals · Privacy officers · Compliance