State Attorney Generals Urge Apple To Strengthen Reproductive Health Data Privacy Standards
A group of ten state Attorney Generals recently urged Apple CEO Tim Cook in a letter to strengthen privacy and security safeguards for Apple App…
Read MoreHealthcare IT Security
Senator Warner Suggests HIPAA Policy Changes To Improve Healthcare Cybersecurity
HC3 Warns Health Sector Of Iranian Threat Campaigns
Biden Declares November ‘Critical Infrastructure Security and Resilience Month’
Study Finds Businesses Are Vulnerable To Evolving Cyber Threats
FBI Warns Health Sector Of Ransomware Gang ‘Daixin Team’
CISA Director Urges Vendors To Adopt Multi-Factor Authentication
Study Investigates The Effect Of Ransomware Attacks On The Health Sector
HC3 Warns Health Sector Of Treat Actor’s Abuse Of Legitimate Software And Security Tools
OIG Advises NIH to Improve Health Grant Program Cybersecurity Requirements
An audit conducted by the Department of Health and Human Services’ Office of Inspector General has found that the National Institutes of Health (NIH) has…
HC3 Warns Health Sector Of Threat Actor Group APT41
The United States Health Sector Cybersecurity Coordination Center (HC3) has warned the health sector of a Chinese state-sponsored threat actor named APT41. The U.S. government…
Research Raises Privacy Concerns Over Abortion Clinic Websites’ Tracking Tool Use
A recent researcher letter published in JAMA Internal Medicine has found third-party tracking tools on 99 percent of examined abortion clinic websites. Concerns have been…
OneTouchPoint Data Breach Reaches 2.65M Individuals
2,651,396 people have now been impacted by the ransomware attack on OneTouchPoint, a mailing and printing company located in Hartland, Wisconsin. Common Ground Healthcare Cooperative…
HC3 Warns Health Organizations Of Hive Ransomware Gang
An alert has been issued by the Department of Health and Human Services (HHS) Cybersecuirty Program (HC3) warning organizations in the health sector of the…
HC3 Warns Health Sector Of Cybercriminal Gang Evil Corp
A warning has been issued by the Health Sector Cybersecurity Coordination Center (HC3) to advise the healthcare and public health sector (HPH) of the dangers…
Global Password Management Provider Reports Data Breach
LastPass, a global leader in password management solutions, has reported a data breach as the result of a cyberattack. LastPass is employed by approximately 30…
HC3 Warns Healthcare Organizations Of Ransomware Group
A warning has been issued by the Department of Health and Human Services’ Hea;tj Sector Cybersecurity Coordination Center (HC3) to advise healthcare organizations about a…
Survey Finds Patients Extemely Concerned About PHI Privacy Protection
A recent survey conducted by the American Medical Association (AMA) and the Savvy Cooperative has revealed that patients are extremely concerned about the lack of…
Study Explains How Health Apps Share Health Information To Social Media Sites
A recent study published in the Cell Press Journal has detailed how health information applications are sending health information to Facebook and other social media…
Study Finds Email Warnings Reduce Unauthorized Employee EHR Access
A recent study published in JAMA Open Network has found that prompt action taken immediately following the detection of unauthorized access to protected health information…
Report Finds Top US Hospitals Sharing Patient Information To Facebook
A recent investigation conducted by The Markup has been released uncovering how Meta is using an analytics tool on approximately a third of the U.S.’s…
Study Shows The Importance Of Password Strength
A recent study published by Digital Shadows has highlighted the importance of password strength. In 2022 alone, approximately 24,650,000,000 account usernames and passwords have been…
Tenet Healthcare Face $100M Lawsuit for Major Breach
Tenet Healthcare and Baptist Health have received a class action lawsuit as a result of a major data breach affecting approximately 1.2 million individuals. On…
FDA Draft Guidelines On Medical Device CyberSecurity Issued
The FDA has published a draft guidance regarding medical device cybersecurity. With the guidance entitled “‘Cybersecurity in Medical Devices: Quality System Considerations and Content of…
Phishing Attack at Atrium Exposes PHI
Atrium Health, a hospital network located in Charlotte, North Carolina, has notified patients that an unauthorized third party had accessed the PHI they maintain. Atrium…
Study Finds Women’s Health Applications Are Not Secure
The global market for mobile applications is seeing a continuous rise in the phenomena known as women’s mobile health (mHealth). The mHealth applications provide services…
Meta Sued For Scraping PHI from Hospital Websites
A class-action lawsuit has been filed against Meta for allegedly scraping PHI from hospital and medical provider websites. The case was filed in the Northern…
Google Deletes Location History For Abortion Clinic Visits
Google recently stated that customers who visit sensitive locations, such as abortion clinics, will have their location information automatically deleted. In a blog posted by…
PHI Exposed Because of Hacking Incidents in 3 HIPAA-Regulated Entities
PHI of Nearly 69,000 Individuals Exposed in Comstar Hacking Incident Comstar located in Rowley, MA offers ambulance billing, collection, ePCR Hosting, and patient/client services. It…
Hackers Could Take Advantage of Zero Day Microsoft Office Vulnerability with Macros Disabled
Microsoft has released a security alert and has given a solution to stop a zero-day vulnerability identified in the Microsoft Windows Support Diagnostic Tool (MSDT)…
Joint Advisory About MedusaLocker Ransomware Issued By FBI, CISA, & FinCEN
A joint cybersecurity alert regarding the MedusaLocker ransomware has been released by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA),…
Cyberattacks Reported by Schneck Medical Center, and NuLife Med
The medical equipment firm NuLife Med LLC located in Manchester, NH, has lately reported that it suffered a cyberattack in March 2022. It detected suspicious…
Email Security Cases Announced by HealthPlex and Optima Dermatology
Healthplex Inc., one of the biggest dental insurance companies based in New York, has reported the compromise of an employee’s email account because of a…
HSCC Published Operational Continuity-Cyber Incident Checklist
An Operational Continuity-Cyber Incident (OCCI) checklist published by the Health Sector Coordinating Council’s (HSCC) Cybersecurity Working Group (CWG) works as a versatile template for dealing…
Horizon Actuarial Services , Clinic of North Texas and Parkland Community Health Plan Announces Data Breaches
Horizon Actuarial Services, Clinic of North Texas, and Parkland Community Health Plan have just announced breaches of the protected health information (PHI) of patients and…
President Biden Advises Private Sector To Strengthen Cybersecurity
The economic sanctions placed on Russia in reaction to the invasion of Ukraine have raised the possibility of cyberattacks by state-sponsored hackers, according to a…
Healthcare Scores Badly for Executing the Cyber Incident Response
2021 was awful in terms of healthcare data breaches having more than 50 million records exposed and around 900 data breaches documented by databreaches.net. Given…
CISA & FBI Warn Against Russian Actor MFA Exploits
In a joint cybersecurity advisory, the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) advise that state-sponsored Russian actors are…
3 Email Security Breaches Impacted Around 111,000 Patients
Email account breach reports were filed by Montrose Regional Health, Acacia Network, and EPIC Pharmacy Network. Montrose Regional Health The health system Montrose Regional Health…
OCR Director Urges HIPAA-Regulated Entities to Fortify Their Cybersecurity Posture
In the latest blog post, Director Lisa J. Pino of the HHS’ Office for Civil Rights told HIPAA-regulated entities to do something to fortify their…
2021 Had Sharp Increase in Ransomware Data Leaks and Higher Ransom Demands
According to the annual threat report published by CrowdStrike, there were a lot more data leaks right after ransomware attacks in 2021, increasing by 82%…
Joint Alert on Higher Risk of Ransomware Attacks on Critical Infrastructure
Cybersecurity agencies in Australia, the United States, and the United Kingdom, issued a joint security advisory concerning the greater worldwide threat of ransomware attacks and…
PHI of 138K Persons Compromised Due to 3 Email Security Incidents
Hackers have acquired access to email accounts comprising protected health information (PHI) at Volunteers of America Southwest California, iRise Florida Spine and Joint Institute, and…
About 30 Healthcare Companies Impacted by CIOX Health Security Breach
The health data management services provider CIOX Health suffered a data breach that has impacted a minimum of 32 healthcare companies. Last July 2021, CIOX…
About 80,000 Patients Affected by Fertility Centers of Illinois Cyberattack
Fertility Centers of Illinois (FCI) has just informed 79,943 existing and former patients regarding unauthorized individuals that may have viewed or obtained some of their…
Patient Records Stolen in a Cyberattack on the Medical Review Institute of America
The Medical Review Institute of America (MRoiA) encountered an alleged ransomware attack in November 2021 that resulted in the theft of sensitive patient data. MRoiA…
Sound Generations Encounters Two Ransomware Attacks Impacting More Than 100,000 Persons
Sound Generations based in Seattle, WA, has reported that unauthorized people have acquired access to its internal networks and have utilized ransomware for file encryption….
One Community Health Patients Alerted Concerning a Cyberattack and Data Theft in April 2021
One Community Health located in Sacramento, CA has lately informed patients about the compromise of its systems from April 19 to April 20, 2021. It…
Higher Risk of Cyber and Ransomware Attacks During Thanksgiving Break
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have informed businesses in the U.S. concerning the higher risk of…
Security Breaches Reported by Lakeshore Bone & Joint Institute and Putnam County Memorial Hospital
Lakeshore Bone & Joint Institute, an Orthopedic practice located in Indiana, has suffered a breach that impacted its Microsoft Office 365 account, including email messages…