Practical articles on HIPAA rules, HITRUST certification, enforcement, and healthcare data protection.
Breach NotificationThis guide highlights the importance of targeted training and verification protocols to prevent social engineering attacks on healthcare help desks.
Breach NotificationHealthcare data breaches rose 6.7% in 2026 despite monthly drops. The debate intensifies on whether budgets should prioritize breach prevention or resilience.
Breach NotificationThe iRhythm breach revealed critical incident response failures that compromised 8.2 million patient records, highlighting the need for better healthcare data transparency.
Breach NotificationThird-party vendors were responsible for 32% of healthcare breaches, highlighting risks in vendor security amid new mandatory healthcare cybersecurity standards.
Get weekly security insights and compliance updates delivered to your inbox.
Breach NotificationBusiness Associate Agreements set rules but don't ensure vendor security. Healthcare entities must enforce continuous oversight to prevent costly data breaches.
Breach NotificationThe $4.6 million Washington Gastroenterology breach settlement exposes five myths that leave organizations vulnerable to costly litigation and compliance failures.
Breach NotificationOracle Health exposed 20 million patient records during a migration due to overlooked staging servers, highlighting critical security gaps in data transitions.
Breach NotificationJefferson County's $2.25M breach settlement underscores the need for healthcare organizations to build breach defense programs that detect and contain intrusions early.
Breach NotificationAfter Central Ohio Primary Care Physicians lost 1.4 million patient records to a vishing attack in August 2026, privacy officers are debating a familiar question: Do you invest in training employees t
Breach NotificationScope This guide focuses on the security controls and assessment procedures necessary when healthcare organizations use third-party applications that handle Protected Health Information (PHI). It exam
Breach NotificationThe Challenge In September 2026, healthcare organizations reported 42 PHI breaches affecting 1,043,266 individuals to the Department of Health and Human Services. A concerning pattern emerged: electro
Breach NotificationOn October 2, South African pathology firm Ampath Laboratories detected and contained a cybersecurity incident. Two weeks later, the threat actor ByteToBreach claimed on a dark web forum to have stole
Breach NotificationWhen 77 healthcare data breaches appear on the OCR s portal in a single month, affecting over 33 million individuals, it s not just bad luck. It s a pattern of predictable mistakes that compliance tea
Breach NotificationWhen Twin Cities Pain Clinic settled class action litigation following a business email compromise attack in July 2025, the financial toll included a $385,000 cap for cash payments, plus attorneys fee
Breach NotificationWhen Millstone Medical Outsourcing detected suspicious activity on December 16, 2025, it launched an investigation. Nine months later, in September 2026, it disclosed a breach affecting Social Securit
Breach NotificationWhen you review breach settlements like Valley Oaks Health s recent preliminary approval, you might draw the wrong conclusions. This settlement covered 50,352 affected individuals and includes up to $
Breach NotificationTwo recent breaches at Casper Orthopedic Associates and Atlantic Digestive Specialists reveal a troubling gap in healthcare cybersecurity: while most organizations can detect an intrusion quickly, con
Breach NotificationWhen Oracle Health disclosed a breach affecting legacy Cerner systems in 2025, the initial report to federal regulators listed 501 patients. By October 2026, that number had climbed to 20 million. Thi
Breach NotificationThese questions are common in compliance team meetings and privacy officer discussions. After Labcorp agreed to a $2.29 million settlement over a 2019 breach involving its debt collector, AMCA, concer
Breach NotificationDetect Unauthorized PHI Access Before It s Too Late You need to detect unauthorized access to PHI before the OCR does. This alert configuration template helps you set up automated monitoring rules to
