The full corpus — beyond today's front page.
196 results · page 4 of 9
Cybersecurity Awareness Month, observed each October, is urging critical infrastructure sectors to adopt a framework being called the Cybersecurity 3Rs. The campaign aims to improve baseline security practices across industries that underpin essential public services.
Who should care: Healthcare professionals · Privacy officers · Compliance
The HHS Office of Inspector General has called on the Centers for Medicare & Medicaid Services and Medicare Advantage organizations to do more to stop fraud involving durable medical equipment, a category that drains significant sums from federal health programs each year.
Who should care: Healthcare professionals · Privacy officers · Compliance
Two Democratic senators have reintroduced the Health Infrastructure Security and Accountability Act, a bill aimed at strengthening cybersecurity protections across the healthcare sector.
Who should care: Healthcare professionals · Privacy officers · Compliance
A hacking group has claimed responsibility for a cyberattack on Cedar County Memorial Hospital in Missouri, with the incident reportedly involving patient or operational data. The claim was reported by The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
The House Energy and Commerce Committee's Subcommittee on Health held a legislative hearing on healthcare cybersecurity proposals. The session focused on examining measures aimed at improving digital security across the healthcare sector.
Who should care: Healthcare professionals · Privacy officers · Compliance
A hacking incident at Hawaii Family Dental has exposed the personal data of nearly 46,000 patients, according to a report from The HIPAA Journal, which also notes separate breach announcements from other healthcare organizations.
Who should care: Healthcare professionals · Privacy officers · Compliance
The U.S. Department of Health and Human Services has released version 3.7 of its Security Risk Assessment Tool, a joint product from the Office for Civil Rights and the Office of the National Coordinator for Health IT designed to help organizations evaluate their HIPAA security compliance.
Who should care: Healthcare professionals · Privacy officers · Compliance
The FDA has published a discussion paper inviting public input on how generative AI tools used in medical devices should be regulated. The agency is in early stages of developing a framework for these technologies.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · AI governance · Policy
The U.S. Department of Health and Human Services has released version 3.7 of its Security Risk Assessment Tool, designed to help covered entities evaluate their compliance with HIPAA security requirements.
Who should care: Healthcare professionals · Privacy officers · Compliance
A high-severity vulnerability has been identified in Orthanc DICOM Server that could be exploited by an authenticated remote attacker to […] The post Orthanc DICOM Server Vulnerability Can Lead to Denial of Service appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Three high-severity vulnerabilities have been identified in NextGen Healthcare Mirth Connect (Mirth Connect), a cross-platform healthcare integration engine for connecting, […] The post High Severity Vulnerabilities Identified in NextGen Healthcare Mirth Connect appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Wellstar Health System and Cone Health (operating as Moses H. Cone Memorial Hospital) have agreed to settle class action lawsuits tied to the use of tracking pixels on their websites or patient portals. The settlements resolve claims that the hospitals shared patient data with third parties through embedded tracking technology.
Who should care: Healthcare professionals · Privacy officers · Compliance
Luminis Health, a Maryland-based health system, is responding to a cyberattack that knocked certain systems offline. The organization is actively investigating the incident.
Who should care: Healthcare professionals · Privacy officers · Compliance
A new survey found that patients want transparency about when and how artificial intelligence is used in their healthcare, including by doctors' offices and other medical providers. The findings point to a clear gap between how AI is being adopted in clinical settings and what patients expect to know about it.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
SonicWall has disclosed two zero-day vulnerabilities in its SMA1000 remote access appliances that attackers are actively chaining together to execute arbitrary code remotely. The flaws are already being exploited in the wild, meaning patches or mitigations are urgent rather than routine.
Who should care: Healthcare professionals · Privacy officers · Compliance
Resource Center of Dallas has notified approximately 12,500 patients that their information was exposed in a cyber incident, joining several other healthcare organizations — including Kern Psychiatric Health and Wellness Center and The Asthma Center — in recently disclosing breaches.
Who should care: Healthcare professionals · Privacy officers · Compliance
Fourteen organizations have expressed interest in joining the federal government's electronic health record program, as the office overseeing its deployment looks to shift toward cloud infrastructure, improve data-sharing between systems, and expand its use of AI.
Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy
The Department of Veterans Affairs is dramatically increasing its contract ceiling with Oracle for an electronic health record modernization project, with costs now projected at $48 billion — nearly five times the original $10 billion estimate.
Who should care: Healthcare professionals · Privacy officers · Compliance
The House Veterans' Affairs Committee voted unanimously to subpoena Oracle Chairman Larry Ellison and CEO Mike Sicilia after the Department of Veterans Affairs proposed increasing its contract with Oracle by $17 billion, raising concerns about the cost trajectory of the agency's electronic health records overhaul.
Who should care: Healthcare professionals · Privacy officers · Compliance
A House committee has subpoenaed Oracle founder Larry Ellison over the company's troubled project to modernize health records for U.S. veterans, a decade-long effort that has drawn frustration from lawmakers on both sides of the aisle.
Who should care: Healthcare professionals · Privacy officers · Compliance
Nutex Health, a Houston-based healthcare company operating dozens of micro-hospitals and specialty facilities, has confirmed that sensitive data was stolen during a cyberattack in August. The company manages care across 27 locations, meaning the breach likely affects patients across multiple sites.
Who should care: Healthcare professionals · Privacy officers · Compliance
A Department of Defense Inspector General audit found that the Pentagon continues to fail at protecting the electronic health records of senior government officials. The findings indicate the security lapses are ongoing, not new.
Who should care: Healthcare professionals · Privacy officers · Compliance
Multiple rehabilitative care practices, senior living facilities, and skilled nursing providers in North Carolina have disclosed data breaches resulting from hacking incidents. The announcements follow a pattern of cyberattacks targeting healthcare organizations that handle sensitive patient information.
Who should care: Healthcare professionals · Privacy officers · Compliance
McKesson, one of the largest healthcare distribution companies in the United States, disclosed a cyberattack in a regulatory filing with the SEC. Hacking group ShinyHunters is claiming responsibility and alleges it stole 284 million records from the company.
Who should care: Healthcare professionals · Privacy officers · Compliance