The full corpus — beyond today's front page.
232 results · page 5 of 10
The NHS has acknowledged a data breach after a BBC investigation found that sensitive personal information about transplant patients — including names, dates of birth, and organ details — was routinely transmitted over an unencrypted pager network.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · Policy
The Boston Healthcare for the Homeless Program has disclosed a data breach affecting at least 185,000 Massachusetts residents, according to a report that also notes breaches at Monongalia County General Hospital and other healthcare organizations.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Texas Hearing Institute disclosed a ransomware attack that compromised the protected health information of nearly 30,000 patients. The incident falls under HIPAA breach notification requirements, prompting the organization to go public with details of the cyberattack.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Aesto Health, a healthcare technology company based in Birmingham, Alabama, has disclosed a data security incident that affected multiple healthcare provider clients. The breach was reported by The HIPAA Journal, though specific details about the number of patients affected or the nature of the compromised data have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The ShinyHunters extortion group breached RingCentral in July and stole personal information from 1.6 million accounts, according to data breach notification service Have I Been Pwned.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
ZOLL Medical has agreed to a $3.5 million settlement to resolve a class action lawsuit stemming from a data breach, with a court granting preliminary approval to the deal.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Trezor has disclosed a data breach affecting nearly 14,000 customers, traced to a hack of ShipMonk, the third-party shipping and logistics provider the hardware wallet company uses. The breach originated outside Trezor's own systems.
Who should care: Cybersecurity · Privacy officers · Administrators
Five healthcare organizations covered under HIPAA have disclosed data breaches, including the Women's Center for Radiology in Florida and Optalis Management Solutions in Michigan, along with three other named entities. The announcements follow standard breach notification requirements under federal health privacy law.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
OnePoint Patient Care and Clay-Platte Family Medicine have reached settlements in lawsuits stemming from data breaches at both organizations. People affected by the breaches may now be eligible to file claims and receive compensation.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Two healthcare providers, Highland Health Systems and Albany Gastroenterology Consultants, have reached preliminary settlements in class action lawsuits stemming from data breaches. Courts have given initial approval to both settlements, moving the cases toward resolution for affected patients.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The UK's ACRO Criminal Records Office suffered three separate intrusions that went undetected for two years, according to a regulatory reprimand. Investigators found that antivirus alerts had gone unread and a content management system was left unpatched, leaving the agency exposed.
Who should care: Cybersecurity · Privacy officers · Administrators
Five small healthcare organizations have disclosed security incidents that exposed patient data, according to reporting by The HIPAA Journal. The organizations were not named in the excerpt beyond one partial reference, but all involve breaches of protected health information.
Who should care: Healthcare professionals · Privacy officers · Compliance
Sunshine Health, a Florida-based Medicaid and health insurance agency, has reported a data breach involving the theft of protected health information following a vishing attack. Health Payment Systems has also disclosed a separate breach.
Who should care: Healthcare professionals · Privacy officers · Compliance
Child Care Resource Center, a California-based child care organization, disclosed a data breach that exposed employee data over a period of approximately nine years. The breach was attributed to internal employee practices rather than an outside attack.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Loma Linda University Health and UCLA Health have both disclosed data security incidents. Details of the scope, affected individuals, and nature of the breaches have not been specified in available reporting.
Who should care: Healthcare professionals · Privacy officers · Compliance
Valve is alerting Steam hardware customers in Europe that their personal data was stolen in a breach at CEVA Logistics, a third-party shipping partner. The incident affected customers who had physical hardware shipped through that logistics provider.
Who should care: Cybersecurity · Privacy officers · Administrators
South Korean financial media company E-Broadcasting confirmed that an external actor illegally accessed its systems, exposing over 460,000 records belonging to users of its 3Pro TV platform. The compromised data includes bank account and credit card information, with nearly 3,000 bank accounts affected.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Healthcare software company Unlimited Technology Systems disclosed a data breach from October 2025 that affected more than 3.8 million people. The company has reported the incident, though details about the type of data exposed have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators
Unlimited Technology Systems, an Ohio-based revenue cycle management company serving healthcare providers, suffered a data breach in October 2025 that exposed information belonging to approximately 3.8 million patients. The breach was discovered days after it occurred and publicly reported months later.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Class action lawsuits stemming from data breaches at McKenzie Health System in Michigan and Aspire Health Alliance have reached settlement agreements. Both cases involved healthcare organizations whose patient data was compromised, prompting litigation that has now been resolved outside of court.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Dutch online retailer Bol has notified customers of a data breach at one of its logistics partners, where unauthorized parties accessed systems and may have viewed or copied customer data. Bol stated its own systems were not compromised, but the leaked data has reportedly appeared on the dark web.
Who should care: Cybersecurity · Privacy officers · Administrators
Omni Healthcare Financial Holdings and Western Montana Clinic have each agreed to settle class action lawsuits stemming from separate data breaches. The settlements resolve claims brought by individuals whose personal or medical information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Federal lawmakers are pushing to extend identity theft protection services for victims of the 2015 Office of Personnel Management data breach before those services expire next month. Senator Mark Warner and Delegate Eleanor Holmes Norton are seeking to make the protections permanent for the millions of current and former federal employees affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Brown Health Medical Group-MA, operating under Lifespan Physicians Group of Massachusetts, has confirmed a data breach involving the protected health information of approximately 312,000 individuals. The incident falls under HIPAA reporting requirements, indicating that sensitive patient data was exposed or compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance