Practical articles on HIPAA rules, HITRUST certification, enforcement, and healthcare data protection.
Breach NotificationA 575-day delay in breach notification led to a $500K settlement. Learn the 5 key mistakes healthcare orgs make in breach response and how to prevent them.
Breach NotificationThis guide highlights the importance of targeted training and verification protocols to prevent social engineering attacks on healthcare help desks.
Breach NotificationBusiness Associate Agreements set rules but don't ensure vendor security. Healthcare entities must enforce continuous oversight to prevent costly data breaches.
Breach NotificationThe $4.6 million Washington Gastroenterology breach settlement exposes five myths that leave organizations vulnerable to costly litigation and compliance failures.
Get weekly security insights and compliance updates delivered to your inbox.
Breach NotificationJefferson County's $2.25M breach settlement underscores the need for healthcare organizations to build breach defense programs that detect and contain intrusions early.
Breach NotificationOn October 2, South African pathology firm Ampath Laboratories detected and contained a cybersecurity incident. Two weeks later, the threat actor ByteToBreach claimed on a dark web forum to have stole
Breach NotificationWhen you review breach settlements like Valley Oaks Health s recent preliminary approval, you might draw the wrong conclusions. This settlement covered 50,352 affected individuals and includes up to $
Breach NotificationThese questions are common in compliance team meetings and privacy officer discussions. After Labcorp agreed to a $2.29 million settlement over a 2019 breach involving its debt collector, AMCA, concer
Breach NotificationWhat the Data Shows Between December 2025 and September 2026, four healthcare organizations disclosed data breaches that revealed a troubling pattern: the gap between detection and notification often
Breach NotificationYou ve hardened your perimeter, run quarterly vulnerability scans, and have a vendor risk management program. So you re protected from class action litigation after a breach, right? Not even close. Th
Breach NotificationScope This guide outlines the legal and operational steps your organization must take when a data breach leads to class action litigation. You ll learn about the regulatory framework, timeline require
Breach NotificationHealthcare organizations often practice breach response procedures, conduct tabletop exercises, and maintain incident response plans. Yet, operational failures still appear in settlement after settlem
Breach NotificationScope This guide focuses on the technical controls and operational practices your team needs to implement in response to the 239% increase in hacking-related healthcare data breaches from January 2018
Breach NotificationUnderstanding the Impact of Breach Settlements When MCNA settled its class action lawsuit for a 2023 data breach affecting 8.9 million individuals, compliance officers were eager to understand the imp
Breach NotificationThe Decision at Hand When a data breach leads to class action litigation, you must decide whether to settle quickly or contest the claims in court. Highlands Oncology Group opted for settlement after
Breach NotificationWhen The Gentlemen ransomware group exfiltrated data from Nutex Health s servers in August 2026, the Houston-based healthcare company faced a significant cybersecurity incident. The attack followed a
Breach NotificationThe Conventional Wisdom Walk into any compliance conference and you ll hear the same refrain: We need better security awareness training. A phishing incident occurs, and the solution is another mandat
Breach NotificationWhen DAP Health faced a class action lawsuit after a cyberattack exposed the Protected Health Information (PHI) of 129,048 individuals, the resulting $1.3 million settlement didn t just reflect the br
Breach NotificationWhen Medical Management Resource Group LLC reached a $1.75 million settlement in August 2026 for a breach affecting over 2.35 million individuals, it revealed more than just financial penalties. It ex
