The full corpus — beyond today's front page.
228 results · page 6 of 10
A weekly health news roundup covers three areas: expansion of clinic services, developments in AI governance within healthcare, and updates related to chronic care management.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
A new guide aims to make HIPAA compliance accessible to small medical practices without requiring legal expertise. The resource is designed to help smaller healthcare providers understand and meet federal patient privacy obligations on their own.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
Since its emergence in May 2025, DireWolf has attacked several U.S. healthcare entities, as listed among its more than 100 targets on its dedicated leak site. As early analysts reporting on the group have noted, DireWolf encrypts victims’ files as part of their double-extortion attacks. Their “About” statement describes them as financially motivated: We are... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A market research report projects the size and trajectory of the healthcare AI governance platform sector through 2033. The report, published by Grand View Research, covers the commercial landscape for tools designed to oversee AI use in healthcare settings.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Nutex Health, a hospital operator and healthcare services provider, is investigating a cyberattack in which an unauthorized party removed data from its systems. The company has not disclosed what types of information were taken or how many people may be affected.
Who should care: Cybersecurity · Privacy officers · Administrators
DAP Health, a nonprofit community health network in Southern California, has agreed to a $1.3 million settlement to resolve a class action lawsuit stemming from a data breach. The case was reported by The HIPAA Journal, which covers healthcare privacy and compliance news.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
CareCloud, a U.S. healthcare IT company, disclosed that a data breach it experienced earlier this year affected more than 3.7 million individuals. The company provides technology and services to medical practices and healthcare organizations.
Who should care: Cybersecurity · Privacy officers · Administrators
CareCloud, a healthcare software company, reported a data breach affecting nearly 3.8 million people after an unauthorized party accessed one of its electronic health record systems for approximately eight hours. The company disclosed the incident to the Department of Health and Human Services.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The U.S. Senate is considering legislation that would strengthen privacy protections for health data collected by consumer wearables such as the Apple Watch. The move would extend health privacy rules beyond traditional medical providers to cover the growing market of personal health tracking devices.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
HCI Innovation Group has published material addressing the future of AI governance and data analytics in healthcare, a sector under growing pressure to balance technological adoption with patient data protections.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
American Addiction Centers in Tennessee and Oculus Pathology in Texas have each disclosed separate hacking incidents. Both organizations operate in healthcare, meaning the breached data likely includes sensitive medical and personal information covered under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance
A large-scale audit of over 80,000 online review responses from nearly 4,000 medical and dental practices found an estimated 21,000 public replies that likely disclosed patient information in violation of HIPAA. The violations were not hidden in back-end systems — they were sitting in publicly visible responses to patient reviews.
Who should care: Healthcare professionals · Privacy officers · Compliance
A ransomware group called Chaos claims to have published 235 gigabytes of protected health information and internal documents allegedly taken from Healthcare Highways, a medical provider network company. The data was posted to a dedicated leak site after an apparent deadline passed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Polish authorities are investigating a breach at MyDr, a healthcare software provider serving doctors and clinics across the country. The company says it has identified and resolved the cause and put additional security measures in place, but the incident may have exposed data tied to as many as 19 million people.
Who should care: Cybersecurity · Privacy officers · Administrators
A piece in SC Media argues that regulated industries — sectors like finance, healthcare, and insurance — face particular risks when they build AI systems without treating data privacy as a core requirement rather than an afterthought.
Who should care: Lawyers · Compliance · General readers · AI governance · Policy · Privacy officers
A Beverly Hills plastic surgeon has confirmed a data theft and extortion incident, joining a string of recent healthcare data breaches that also include SunCloud Health, Minnesota ENT, and several other medical providers.
Who should care: Healthcare professionals · Privacy officers · Compliance
Quantum Health, a healthcare navigation and care coordination company, disclosed a data breach after a vishing attack — a voice-based social engineering scheme — gave threat actors unauthorized access to its network. Heart of America Medical Center was also named in connection with recent breach announcements.
Who should care: Healthcare professionals · Privacy officers · Compliance
Organizations working with AI are drawing practical lessons about how to govern the technology as deployments move from pilot to production. The specifics vary by sector, but the pattern points to a field still figuring out accountability, oversight, and risk management in real time.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
The Boston Healthcare for the Homeless Program has disclosed a data breach affecting at least 185,000 Massachusetts residents, according to a report that also notes breaches at Monongalia County General Hospital and other healthcare organizations.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A 2026 analysis argues that responsibility for governing AI in healthcare settings is landing on clinicians rather than on institutions, regulators, or technology companies.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Aesto Health, a healthcare technology company based in Birmingham, Alabama, has disclosed a data security incident that affected multiple healthcare provider clients. The breach was reported by The HIPAA Journal, though specific details about the number of patients affected or the nature of the compromised data have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Five healthcare organizations covered under HIPAA have disclosed data breaches, including the Women's Center for Radiology in Florida and Optalis Management Solutions in Michigan, along with three other named entities. The announcements follow standard breach notification requirements under federal health privacy law.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
Two healthcare providers, Highland Health Systems and Albany Gastroenterology Consultants, have reached preliminary settlements in class action lawsuits stemming from data breaches. Courts have given initial approval to both settlements, moving the cases toward resolution for affected patients.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Marianne Kolbasuk McGee reports: A Canadian hospital is dealing with a ransomware attack on its facility management systems that has affected the building’s doors and heating, ventilation and air conditioning equipment. Some experts said the incident underscores growing cyberthreats involving operational technology in healthcare. The attack this week on Manitoba, Ontario’s largest hospital – Winnipeg’s... Source
Who should care: Cybersecurity · Privacy officers · Administrators