Practical articles on HIPAA rules, HITRUST certification, enforcement, and healthcare data protection.
Breach NotificationThe iRhythm breach revealed critical incident response failures that compromised 8.2 million patient records, highlighting the need for better healthcare data transparency.
Breach NotificationAfter Central Ohio Primary Care Physicians lost 1.4 million patient records to a vishing attack in August 2026, privacy officers are debating a familiar question: Do you invest in training employees t
Breach NotificationTwo recent breaches at Casper Orthopedic Associates and Atlantic Digestive Specialists reveal a troubling gap in healthcare cybersecurity: while most organizations can detect an intrusion quickly, con
Breach NotificationWhen a cancer treatment device maker like Novocure becomes the target of a data extortion gang, it shows that your organization s size and specialization won t protect you. Novocure discovered unautho
Get weekly security insights and compliance updates delivered to your inbox.
Breach NotificationOn December 18, 2025, Aesto Health discovered unauthorized access to its AWS infrastructure. By the time the Birmingham-based healthcare technology company completed its investigation and notified aff
Breach NotificationThese myths persist because third-party risk management sits between your security team s control and your vendors promises. When ShinyHunters claimed the theft of 284 million records from McKesson th
Breach NotificationDAP Health s $1.3 million settlement following a 2024 email server breach affecting 129,048 individuals highlights a harsh reality for nonprofit healthcare organizations: breach response costs often f
