The full corpus — beyond today's front page.
256 results · page 9 of 11
Calibrated Healthcare has agreed to settle a class action lawsuit arising from a data breach that occurred in February. The settlement resolves claims brought against two related entities, Calibrated Healthcare Systems and Calibrated Healthcare.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Bojangles faces renewed class-action litigation from employees whose personal data was compromised in a 2024 breach attributed to the ransomware group Hunters International. A North Carolina judge is now weighing key legal questions around standing and negligence as the case moves through both state and federal courts.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
North Los Angeles County Regional Center is notifying individuals whose data was exposed in a ransomware attack that occurred in November 2024. The organization has begun mailing breach notification letters to those affected, months after the incident took place.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A major medical device manufacturer has disclosed a data breach affecting nearly 4 million people, with Social Security numbers and health-related information among the data accessed. The company stated it has not found evidence that the exposed data has appeared publicly online.
Who should care: Cybersecurity · Privacy officers · Administrators
A retired class-action lawyer has filed a lawsuit against the Alberta government, its Chief Electoral Officer, and two pro-secession organizations over an alleged data breach affecting roughly 2.9 million provincial residents. The suit targets the Centurion Project, claiming it unlawfully obtained voter data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The Texas Hearing Institute has reported a data breach to the Texas Attorney General affecting more than 29,000 residents. The organization, which provides hearing-related services, filed the notification as required under applicable law.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
Hong Kong conglomerate Shun Hing Group confirmed that a March cyberattack compromised its systems, exposing data belonging to roughly 920,000 customers and resulting in more than one million files being encrypted by the attackers.
Who should care: Cybersecurity · Privacy officers · Administrators
AdaptHealth, a publicly traded home medical equipment and supplies company, has disclosed a cybersecurity incident it has classified as material, involving the theft of patient data. The breach affects customers who rely on the company for home health products including diabetes supplies and sleep therapy equipment.
Who should care: Healthcare professionals · Privacy officers · Compliance
Two women's health clinics — one in Delaware, one in Florida — have disclosed separate data breach incidents involving unauthorized access to or retention of patient information. Both providers are covered under HIPAA, which governs the handling of sensitive health data.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
The U.S. Department of Homeland Security has confirmed it is investigating a cyberattack targeting an information-sharing network. Details about the scope, the attacker, or what data may have been accessed have not been disclosed.
Who should care: Cybersecurity · Privacy officers · Administrators
Greater Rochester Independent Practice Association has reached a settlement to resolve litigation stemming from a May 2023 data breach tied to the MOVEit file-transfer vulnerability. The case follows a wave of similar claims against organizations that used the widely exploited software.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Serviceaide, an AI-powered IT service management company, has agreed to pay $1.8 million to settle litigation stemming from a data breach. The case was covered by The HIPAA Journal, suggesting the incident involved protected health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · AI governance · Policy
Medtronic is sending breach notifications to customers after the ShinyHunters hacking group gained unauthorized access to personal data held by the medical device company. The scope of exposed information has not been fully detailed in public disclosures.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A 19-year-old suspect linked to the Scattered Spider hacking group has been extradited to the United States, where an unsealed complaint accuses him of involvement in multiple intrusions, including a 2025 breach of a luxury jewelry retailer.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The Department of Homeland Security is investigating a breach of the Homeland Security Information Network, a platform used to share sensitive information across federal, state, local, and private-sector partners. The scope of the compromise has not been publicly detailed.
Who should care: Cybersecurity · Privacy officers · Administrators
Verizon Business has published its first Breach Impact Study, examining the financial consequences of data breaches. The report appears focused on quantifying the real costs organizations face when breaches occur, with coverage in a HIPAA-focused publication suggesting a healthcare angle.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Medtronic has begun notifying people whose data was exposed in a cyberattack that occurred in April 2026, with the ShinyHunters threat group claiming responsibility for the breach. The medical device company's notification process follows reporting by The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
Aflac has disclosed a data breach affecting its Japan subsidiary, in which attackers accessed and stole personal information and bank account data. The incident involves one of the largest supplemental insurance providers in the United States, a Fortune 500 company serving millions of customers.
Who should care: Cybersecurity · Privacy officers · Administrators
Aflac has disclosed a data breach stemming from an attack on its Japan-based subsidiary, in which personal information and bank account details were stolen from affected individuals. The company has not publicly confirmed the full scope of the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
Amicus Solutions, also known as Fedora Solutions, has disclosed a cybersecurity incident that affected Huntsville Hospital Health System. The hospital confirmed it was impacted by the breach, which was reported in connection with HIPAA compliance obligations.
Who should care: Healthcare professionals · Privacy officers · Compliance
Washington State's Department of Social and Health Services disclosed that an employee improperly accessed protected records belonging to approximately 8,600 individuals, constituting an insider data breach of sensitive personal information held by a state agency.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Fox Rothschild, a top-100 U.S. law firm, has suffered a data breach carried out by Silent Ransom Group, a threat actor known to target law firms specifically. The breach resulted in a data leak, exposing the firm and potentially its clients to serious confidentiality risks.
Who should care: Cybersecurity · Privacy officers · Administrators
Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after breaching its systems by exploiting a zero-day vulnerability in an Oracle PeopleSoft server. [...]
Who should care: Cybersecurity · Privacy officers · Administrators