The full corpus — beyond today's front page.
228 results · page 7 of 10
Courts overseeing multidistrict litigation stemming from the 2024 Change Healthcare ransomware attack have established strict rules governing how the stolen dataset can be used in proceedings, reflecting the extraordinary volume and sensitivity of the compromised health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
MyDr, one of Poland's largest healthcare system providers, is investigating a security breach after attackers claimed to have accessed patient data from multiple Polish clinics. The alleged hackers say they obtained nearly 18.8 million unique PESEL numbers, Poland's national identification numbers used across government and financial services.
Who should care: Healthcare professionals · Privacy officers · Compliance
Five small healthcare organizations have disclosed security incidents that exposed patient data, according to reporting by The HIPAA Journal. The organizations were not named in the excerpt beyond one partial reference, but all involve breaches of protected health information.
Who should care: Healthcare professionals · Privacy officers · Compliance
CISA, the FBI, and international partners have issued a joint advisory warning healthcare organizations about Gunra, a ransomware-as-a-service operation actively targeting the sector.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A commentary in The Guardian argues that AI tools used in medical training pose a risk beyond deskilling experienced doctors — that students and residents may never develop independent clinical judgment in the first place, because they are reaching for AI before foundational reasoning skills are built.
Who should care: General readers · AI governance · Policy
Healthcare software company Unlimited Technology Systems disclosed a data breach from October 2025 that affected more than 3.8 million people. The company has reported the incident, though details about the type of data exposed have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators
UPMC and KLAS Research have released a study examining how healthcare organizations are adopting AI and what governance barriers are slowing or shaping that process.
Who should care: General readers · AI governance · Policy
Five healthcare providers have reached settlements in class action lawsuits tied to their use of website tracking pixels, part of a broader wave of similar legal actions against the healthcare sector over the past 18 months.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity
Unlimited Technology Systems, an Ohio-based revenue cycle management company serving healthcare providers, suffered a data breach in October 2025 that exposed information belonging to approximately 3.8 million patients. The breach was discovered days after it occurred and publicly reported months later.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Cardiology Associates of Port Huron has not publicly responded to claims by a threat group called Orova that it hacked the medical practice and stole patient data in June. The group, one of roughly four dozen new actors targeting U.S. healthcare in early 2026, listed the cardiology practice on a dark web leak site.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Class action lawsuits stemming from data breaches at McKenzie Health System in Michigan and Aspire Health Alliance have reached settlement agreements. Both cases involved healthcare organizations whose patient data was compromised, prompting litigation that has now been resolved outside of court.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Omni Healthcare Financial Holdings and Western Montana Clinic have each agreed to settle class action lawsuits stemming from separate data breaches. The settlements resolve claims brought by individuals whose personal or medical information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The HIPAA Journal is prompting healthcare organizations to evaluate their readiness for security incidents by conducting formal risk assessments that identify threats to protected health information and gauge the likelihood those threats materialize.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Amgen has disclosed to regulators that patient information and proprietary company data were accessed through a breach affecting third-party cloud systems the company relied on. The incident adds to a growing pattern of healthcare and biotech firms suffering data losses through vendors rather than their own internal infrastructure.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
CareCloud, a New Jersey-based health technology company that provides electronic health records and related clinical services, has notified more than 345,000 patients that their data was stolen in a cyberattack. The company offers cloud-based and AI-assisted tools used by healthcare providers across the country.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
Spanish biopharmaceutical firm Diater has appeared on the dark web victim list published by the ransomware group DeadLock, which is using a double extortion strategy — encrypting data and threatening to publish it. The breach reportedly affects up to a decade of sensitive medical records belonging to patients and healthcare professionals.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Healthcare IT company CareCloud is notifying more than 350,000 people that their data was stolen after hackers accessed its AWS environment in March 2026, disrupting an electronic health record system within its CareCloud Health division. The company's investigation confirmed unauthorized access to patient and possibly provider information stored in that cloud environment.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Health-ISAC has issued a warning to healthcare organizations about a rise in successful data theft attacks attributed to the ShinyHunters threat group. The advisory signals that the group is actively targeting the health sector and making meaningful progress against its defenses.
Who should care: Healthcare professionals · Privacy officers · Compliance
Wellstar Health System has agreed to a $4.25 million settlement to resolve a data privacy lawsuit, pending judicial approval. The agreement would compensate individuals affected by the underlying privacy dispute involving the Georgia-based healthcare network.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
OSF Healthcare System has agreed to pay $552,250 to settle a HIPAA investigation by the HHS Office for Civil Rights. The settlement resolves findings related to OSF Healthcare and its affiliated covered entities, though the specific violations were not detailed in the available excerpt.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals
The HHS Office for Civil Rights has reached a settlement with OSF Healthcare and affiliated entities following a ransomware attack carried out in 2021 by a threat group called Xing Team. The investigation examined OSF's handling of the incident, including concerns about its notification timeline and response to affected individuals.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
The Federal Trade Commission has filed a lawsuit against telehealth company Hims & Hers, targeting the company's data privacy practices and billing conduct. The action signals continued federal scrutiny of how digital health platforms handle sensitive consumer information and subscription-style charges.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
A former CPA has been sentenced for laundering $5.3 million stolen from Children's Healthcare of Atlanta through a 2023 business email compromise attack targeting one of the hospital system's vendors. The fraud exploited payment processes between the healthcare organization and its supply chain.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Banner Health and LifeStance Health Group have each agreed to settle lawsuits stemming from their use of tracking pixels and similar technologies on their websites. The tools allegedly collected and shared patient data with third parties without proper authorization under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance · Cybersecurity