Data Breaches

How the FTC’s Health Breach Notification Rule Will Impact Health Apps

by Jill McKeon

Customers regularly provide their heart rate, weight, height, sleep, fertility, and other sensitive medical data to health apps. But while standard healthcare providers are beholden to HIPAA, health...

Lawsuit Links Baby Death to AL Healthcare Ransomware Attack

by Jill McKeon

A baby born at Springhill Medical Center in Alabama later died due to diminished care that resulted from a 2019 healthcare ransomware attack, a lawsuit alleged. The case marks the first public claim...

Bad Actors Target Small Clinics With Healthcare Ransomware Attacks

by Jill McKeon

As COVID-19 continues to overwhelm providers across the country, cybercriminals are increasingly targeting smaller facilities with sophisticated healthcare ransomware attacks that cause EHR downtime...

UC San Diego Health Sued Over Healthcare Data Breach

by Jill McKeon

UC San Diego Health is facing a lawsuit after a healthcare data breach spanning from December 2020 to April 2021 impacted almost 500,000 individuals. Lawyers filed the suit in San Diego federal court...

CISA, FBI, NSA Release Advisory Warning of Conti Ransomware Attacks

by Jill McKeon

The Cybersecurity and Infrastructure Agency (CISA), the FBI, and the National Security Agency (NSA) released an advisory warning organizations of Conti ransomware group, a notorious hacking...

Alaska Health Department Notifies Residents of Cyberattack

by Jill McKeon

The Alaska Department of Health and Social Services (DHSS) began notifying Alaska residents about a May 2021 cyberattack that impacted an unknown number of Alaskans and may have exposed protected...

Hive Ransomware Continues to Attack Healthcare Providers

by Jill McKeon

Recent data breaches continue to show the growing prevalence of Hive ransomware and other hacking groups as they continue to infiltrate the networks of US healthcare providers. High-profile...

Healthcare Ransomware Attacks Lead to Increased Patient Mortality

by Jill McKeon

Financial strain, care disruptions, and time-consuming recovery operations often result from healthcare ransomware attacks, but new research revealed that increased patient mortality is also likely in...

FTC: Health Apps Must Comply with Health Breach Notification Rule

by Jill McKeon

The Federal Trade Commission (FTC) issued a policy statement emphasizing that health apps and connected device companies must comply with the Health Breach Notification Rule. The rule requires vendors...

Improper Hard Drive Disposal Leads to Health Data Breach for 100K

by Jill McKeon

HealthReach Community Health Centers in Waterville, Maine, began notifying over 100,000 patients of a health data breach that resulted from improper disposal of hard drives. The hard drives were...

St. Joseph’s/Candler Faces Lawsuits in Wake of Ransomware Attack

by Jill McKeon

Two class action lawsuits were filed against St. Joseph’s/Candler (SJ/C) alleging that the large Georgia health system was negligent in preventing a December 2020 ransomware attack that went...

61M Fitbit, Apple Users Had Data Exposed in Wearable Device Data Breach

by Jill McKeon

Over 61 million fitness tracker records from both Apple and Fitbit were exposed online in a recent wearable device data breach, according to a report from WebsitePlanet and independent cybersecurity...

Walgreens’ COVID-19 Testing Registration System Exposes PII

by Jill McKeon

Millions who got COVID-19 tests at Walgreens may find that their personally identifiable information (PII) was left open on the internet for all to see, thanks to a cyber vulnerability found by...

Houston Provider Delayed Notice of Ransomware Attack for Months

by Jill McKeon

Gastroenterology Consultants in Houston, Texas, began notifying over 161,000 patients of a January ransomware attack on August 6. The notification came as a surprise to many patients who were unaware...

AZ Ransomware Attack Leads to Unrecoverable EHRs, Data Loss

by Jill McKeon

Arizona-based Queen Creek Medical Center, also known as Desert Wells Family Medicine, will have to rebuild patient medical records from scratch after a ransomware attack corrupted and destroyed EHRs....

Employee Email Misuse Puts Patient PHI in Jeopardy in CA, FL

by Jill McKeon

Employee email misuse led to patient protected health information (PHI) being compromised in two recent healthcare data breaches, one in California and the other in Florida. As ransomware attacks...

Business Associate Ransomware Attack Impacts 115K in CA

by Jill McKeon

California health center LifeLong Medical Care began notifying over 115,000 individuals of a business associate ransomware attack that may have exposed protected health information (PHI) and personally...

DuPage Medical Group Faces Lawsuit After Cyberattack Impacts 600K

by Jill McKeon

Illinois-based DuPage Medical Group (DMG) is facing a lawsuit just a few days after it notified over 600,000 patients of a cyberattack that may have compromised protected health information (PHI). The...

MA Hospital Faces Class Action Suit After Paying Ransomware Attackers

by Jill McKeon

Massachusetts-based Sturdy Memorial Hospital is facing a class action lawsuit after a ransomware attack in February that impacted over 35,000 individuals and put personally identifiable information...

Healthcare Ransomware Attack in CA Involves PHI of 57K

by Jill McKeon

San Andreas Regional Center (SARC), a non-profit that provides support and services for those with developmental disabilities, announced that it suffered a ransomware attack that may have exposed the...