• Kaiser notifies 13.4M individuals of data breach

    April 26, 2024 - Kaiser Foundation Health Plan filed a data breach report with the HHS Office for Civil Rights (OCR), confirming a 13.4-million record breach. The filing signifies the largest breach reported to OCR in 2024 so far. Kaiser told TechCrunch that the breach stemmed from its use of certain technologies installed on its websites and applications, which...

  • Threat actors increasingly exploit zero-day vulnerabilities to evade threat detection

    April 25, 2024 - Threat actors are increasingly targeting edge devices, exploiting zero-day vulnerabilities, and engaging in living off the land attacks to evade threat detection tools, Mandiant revealed in a recent report. In 2023, Mandiant tracked 97 unique zero-day vulnerabilities that were exploited in the wild, signifying a 50% increase from 2022. Exploits...

  • Third-party tracking tech lawsuits surge in healthcare

    April 24, 2024 - High rates of data breaches and cyberattacks mean that healthcare is no stranger to lawsuits. According to a recent report from law firm BakerHostetler, the healthcare sector’s use of third-party tracking pixels and other web analytics tools has resulted in even more legal risk. Healthcare accounted for 28 percent of the more than 1,150...

  • Change Healthcare cyberattack fallout continues

    April 23, 2024 - UPDATE 4/23/2024 - This article has been updated to reflect new information about the Change Healthcare cyberattack. UHG has not yet provided a formal breach notification to HHS following the cyberattack. In an April 22 update, UHG stated that the review of impacted data is "likely to take several months of continued analysis before...


Today's Top Stories

Kaiser notifies 13.4M individuals of data breach

Kaiser Foundation Health Plan filed a data breach report with the HHS Office for Civil Rights (OCR), confirming a 13.4-million record breach. The filing signifies the largest breach reported to OCR in...

Threat actors increasingly exploit zero-day vulnerabilities to evade threat detection

Threat actors are increasingly targeting edge devices, exploiting zero-day vulnerabilities, and engaging in living off the land attacks to evade threat detection tools, Mandiant revealed in a recent...

Third-party tracking tech lawsuits surge in healthcare

High rates of data breaches and cyberattacks mean that healthcare is no stranger to lawsuits. According to a recent report from law firm BakerHostetler, the healthcare sector’s use of third-party...

Change Healthcare cyberattack fallout continues

UPDATE 4/23/2024 - This article has been updated to reflect new information about the Change Healthcare cyberattack. UHG has not yet provided a formal breach notification to HHS following the...

HHS finalizes rule to strengthen reproductive health data privacy under HIPAA

The Biden-Harris administration, through HHS, issued a final rule to bolster patient privacy for those seeking and administering lawful reproductive healthcare. Entitled HIPAA Privacy Rule to Support...

Hearing on Change Healthcare cyberattack yields more questions for UHG

Lawmakers had many questions for UnitedHealth Group (UHG), the parent of Change Healthcare, at a March 16 House subcommittee hearing about the cyberattack that halted claims payments and disrupted...

Cerebral faces $7M FTC penalty over alleged health data security failures

Under a proposed order from the Federal Trade Commission (FTC), online mental healthcare platform Cerebral will be restricted from disclosing consumers’ personal health information to third...

View all stories