The full corpus — beyond today's front page.
228 results · page 4 of 10
A cyberattack on a Polish healthcare software provider resulted in the theft of patient personal data, continuing a recent pattern of attacks targeting the country's medical sector.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Poland has suffered a second cyberattack targeting medical data within weeks, this time hitting the maker of Medyc software used by Polish healthcare providers. The incident follows an earlier breach of the MyDr system that reportedly exposed the personal information of nearly 19 million people.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
MedImpact Healthcare Systems, a pharmacy benefit management company, and Rosch Visionary Systems have each announced data breaches, with notification letters being sent to affected individuals. Both disclosures appear to fall under HIPAA reporting requirements.
Who should care: Healthcare professionals · Privacy officers · Compliance
Astrana Health has disclosed a data breach to the SEC after hackers gained access to confidential information by impersonating company employees. The incident adds Astrana to a growing list of healthcare technology companies reporting cybersecurity incidents to federal regulators.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Three healthcare providers — a gastroenterology practice in Central New York, Three Oaks Hospice, and Doctor's Choice Home — have each announced separate data breaches. The incidents involve organizations that handle sensitive patient medical records.
Who should care: Healthcare professionals · Privacy officers · Compliance
Texas-based Oculus Pathology has disclosed a security incident from April 2026 that exposed data belonging to more than 20,000 patients. The breach was reported by The HIPAA Journal alongside other recent healthcare data breach announcements.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A new analysis of ransomware activity finds that roughly three-quarters of active ransomware groups are targeting the healthcare sector in the United States. The findings point to sustained, broad pressure on healthcare organizations rather than isolated incidents.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A healthcare compliance attorney attended a two-day HIPAA Security Conference hosted by the Office for Civil Rights at the NIST campus in Gaithersburg, sharing observations from the event. The conference brought together regulators and compliance professionals to discuss healthcare data security requirements.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
United Language Group, a translation services vendor in Minnesota, has disclosed a data breach affecting members of UnitedHealthcare health plans. Two other healthcare providers, Desert Pulmonary & Sleep Consultants in Arizona and Azle, also announced separate breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Two Democratic senators have reintroduced the Health Infrastructure Security and Accountability Act, a bill aimed at strengthening cybersecurity protections across the healthcare sector.
Who should care: Healthcare professionals · Privacy officers · Compliance
Modernizing Medicine, a Florida company that provides cloud-based EHR and AI-powered software to healthcare providers, has agreed to a $3 million settlement over a data breach. The company serves medical practices, making the exposed data likely to include sensitive patient health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · AI governance · Policy
A Healthcare IT Today piece outlines approaches for keeping consumer-facing healthcare applications compliant with privacy and security rules. The focus is on the specific challenges that arise when health apps interact directly with patients and consumers rather than operating inside a clinical system.
Who should care: Lawyers · Compliance · General readers · Privacy officers · Policy
The House Energy and Commerce Committee's Subcommittee on Health held a legislative hearing on healthcare cybersecurity proposals. The session focused on examining measures aimed at improving digital security across the healthcare sector.
Who should care: Healthcare professionals · Privacy officers · Compliance
Aetna's chief technology officer discussed the insurer's approach to using AI in prior authorization decisions and how the company governs those systems. The conversation touches on one of the most consequential uses of AI in American healthcare.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Samsung Medical Center is building out a smart hospital model that relies on maturing AI governance as a foundation for its digital transformation. The effort positions formal AI oversight structures as central to how clinical and operational AI tools are deployed.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
The Office of Inspector General has been using Copilot Chat “to review inspection data such as interview transcripts, documents, questionnaire responses, and physical observations.”
Who should care: General readers · AI governance · Policy
A hacking incident at Hawaii Family Dental has exposed the personal data of nearly 46,000 patients, according to a report from The HIPAA Journal, which also notes separate breach announcements from other healthcare organizations.
Who should care: Healthcare professionals · Privacy officers · Compliance
A report or commentary calls for AI regulation in healthcare to meet three standards: safety, proportionality, and public trust. The piece appears to address how oversight frameworks should be designed as AI tools enter clinical and administrative health settings.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
AI governance is shifting from pre-deployment policy reviews toward real-time, runtime controls that monitor and constrain AI behavior as it runs. Heavily regulated industries such as finance and healthcare appear to be leading this transition.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
Shanghai removes six healthcare apps over data-privacy violations MLex
Who should care: General readers · Privacy officers · Policy
Three high-severity vulnerabilities have been identified in NextGen Healthcare Mirth Connect (Mirth Connect), a cross-platform healthcare integration engine for connecting, […] The post High Severity Vulnerabilities Identified in NextGen Healthcare Mirth Connect appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Veradigm, a Chicago-based electronic health records and practice management company formerly known as Allscripts Healthcare Solutions, has disclosed a cybersecurity incident involving a third-party breach. Hackers are threatening to publish the stolen data if their demands are not met.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A new Ipsos study finds that when it comes to regulating AI in healthcare, the public's top concerns are whether the technology is accurate and whether humans remain in control of its decisions.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
The UK's Medicines and Healthcare products Regulatory Agency has said existing laws are not adequate for AI being deployed in healthcare, with its chief executive telling the BBC that the technology will soon be in routine NHS use.
Who should care: General readers · AI governance · Policy