The full corpus — beyond today's front page.
196 results · page 5 of 9
A new category of minimalist wearables is emerging that tracks health data passively, without the constant alerts and screen interactions that have made smartwatches feel intrusive. The pitch is less distraction, but the devices still collect continuous biometric data.
Who should care: Healthcare professionals · Privacy officers · Compliance
Boston Scientific, a major Massachusetts-based medical device and biomedical engineering company, has disclosed a cyberattack that is disrupting some of its information technology systems. The company has not yet detailed the scope of the breach or what data may be involved.
Who should care: Healthcare professionals · Privacy officers · Compliance
A new guide aims to make HIPAA compliance accessible to small medical practices without requiring legal expertise. The resource is designed to help smaller healthcare providers understand and meet federal patient privacy obligations on their own.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
More than a dozen U.S. health care systems have issued warnings to patients about an ongoing phishing campaign involving emails […] The post Health Systems Warn Patients About Epic MyChart Patient Portal Phishing Scam appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Paylogix, a company that manages employee benefits, has notified regulators that hackers accessed and stole sensitive financial and health information belonging to tens of thousands of people.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
The Trump administration has walked back an earlier directive to hospitals requiring participation in a federal injury surveillance system, now telling them the program is voluntary. The shift follows reporting that revealed earlier correspondence had characterized hospital participation as mandatory.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity · General readers · Policy
The Department of Veterans Affairs has deployed its new electronic health records system at three Indiana-based medical facilities, bringing the total number of rollouts in the current year to eleven.
Who should care: Healthcare professionals · Privacy officers · Compliance
Alberta has made changes to its Health Information Act, with updates touching on privacy impact assessments, shared custody arrangements, and the use of artificial intelligence in handling health data.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
The Department of Veterans Affairs has expanded its electronic health records modernization contract with Oracle, raising the total value to nearly $27 billion. The modification represents a roughly $17 billion increase to the existing agreement.
Who should care: Healthcare professionals · Privacy officers · Compliance
The U.S. Senate is considering legislation that would strengthen privacy protections for health data collected by consumer wearables such as the Apple Watch. The move would extend health privacy rules beyond traditional medical providers to cover the growing market of personal health tracking devices.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
The Social Security Administration has expanded a system that pulls structured electronic health records directly from providers, giving the agency near-instant access to medical data for people applying for disability benefits. The goal is to cut the notoriously long wait times for disability claim decisions.
Who should care: Healthcare professionals · Privacy officers · Compliance
American Addiction Centers in Tennessee and Oculus Pathology in Texas have each disclosed separate hacking incidents. Both organizations operate in healthcare, meaning the breached data likely includes sensitive medical and personal information covered under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance
A large-scale audit of over 80,000 online review responses from nearly 4,000 medical and dental practices found an estimated 21,000 public replies that likely disclosed patient information in violation of HIPAA. The violations were not hidden in back-end systems — they were sitting in publicly visible responses to patient reviews.
Who should care: Healthcare professionals · Privacy officers · Compliance
A Beverly Hills plastic surgeon has confirmed a data theft and extortion incident, joining a string of recent healthcare data breaches that also include SunCloud Health, Minnesota ENT, and several other medical providers.
Who should care: Healthcare professionals · Privacy officers · Compliance
Quantum Health, a healthcare navigation and care coordination company, disclosed a data breach after a vishing attack — a voice-based social engineering scheme — gave threat actors unauthorized access to its network. Heart of America Medical Center was also named in connection with recent breach announcements.
Who should care: Healthcare professionals · Privacy officers · Compliance
Five healthcare organizations covered under HIPAA have disclosed data breaches, including the Women's Center for Radiology in Florida and Optalis Management Solutions in Michigan, along with three other named entities. The announcements follow standard breach notification requirements under federal health privacy law.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
The Department of Veterans Affairs is seeking to extend its electronic health records contract with Oracle through 2031, citing the need to continue deployment across VA medical centers until all facilities have fully transitioned to the new system.
Who should care: Healthcare professionals · Privacy officers · Compliance
EPIC filed an amicus brief in the Seventh Circuit asking the court to treat Edward-Elmhurst Health's use of Meta Pixel on its patient portal as a violation of the federal Wiretap Act. The health system embedded tracking code that automatically sent patient data from its MyChart portal to Meta and other third parties.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
Newfoundland and Labrador's Privacy Commissioner is recommending that public bodies disclose the names of employees responsible for snooping-related privacy breaches to the people whose records were accessed. The recommendation follows an incident in which an NL Health Services employee viewed a patient's health record without authorization.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Security researchers have identified critical vulnerabilities in the Mira Hormone Monitor, a consumer fertility tracking device. The findings were reported by The HIPAA Journal, suggesting the flaws carry potential health data privacy implications.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
MyDr, one of Poland's largest healthcare system providers, is investigating a security breach after attackers claimed to have accessed patient data from multiple Polish clinics. The alleged hackers say they obtained nearly 18.8 million unique PESEL numbers, Poland's national identification numbers used across government and financial services.
Who should care: Healthcare professionals · Privacy officers · Compliance
Five small healthcare organizations have disclosed security incidents that exposed patient data, according to reporting by The HIPAA Journal. The organizations were not named in the excerpt beyond one partial reference, but all involve breaches of protected health information.
Who should care: Healthcare professionals · Privacy officers · Compliance
Sunshine Health, a Florida-based Medicaid and health insurance agency, has reported a data breach involving the theft of protected health information following a vishing attack. Health Payment Systems has also disclosed a separate breach.
Who should care: Healthcare professionals · Privacy officers · Compliance
Federal agencies have quietly joined the governing council of TEFCA, a national health data exchange network that connects thousands of hospitals, clinics, and other medical providers. The move gives federal agencies a formal role in a system designed to move health records digitally across the country.
Who should care: Healthcare professionals · Privacy officers · Compliance