News

Third-Party Mailing Error Exposes 37K SSNs at Sound Health and Wellness Trust

by

A third-party mailing error originating at Zenith American Solutions resulted in the exposure of 37,146 Social Security numbers provided to Sound Health and Wellness Trust. Zenith American Solutions...

Dental Care Alliance Reaches $3M Proposed Settlement Over Healthcare Cyberattack

by

Dental Care Alliance (DCA) reached a $3 million proposed settlement over a December 2020 healthcare cyberattack that lasted for one month and impacted 1 million patients and employees. DCA is a...

120K Priority Health Members Impacted By Third-Party Data Breach

by

Priority Health issued a notice about a third-party data breach that originated at the law firm Warner Norcross & Judd (WNJ) in October 2021. Priority Health is Michigan’s second-largest...

HC3 Provides Tips For Maintaining IoT Security in Healthcare

by

In its latest analyst note, the HHS Health Sector Cybersecurity Coordination Center (HC3) outlined internet of things (IoT) security risks and mitigation tactics. “Today, there are about 7...

CA Health System Reaches $340K Settlement Over Healthcare Data Breach

by

In a recent settlement, California-based Salinas Valley Memorial Healthcare System (SVMHS) agreed to pay up to $340,000 to class members impacted by a 2020 healthcare data breach. According to a...

Neurology Practice Notifies 363K of Data Breach, PHI Released on Dark Web

by

Indiana-based neurology practice Goodman Campbell Brain and Spine notified 362,833 individuals of a data breach that occurred in May. With a level of specificity that is uncommon in data breach...

CISA Sheds Light On Last Year’s Top Malware Strains

by

The Cybersecurity and Infrastructure Security Agency (CISA) provided insight on the top malware threats of 2021 in its latest advisory. Co-authored by the Australian Cyber Security Centre (ACSC), the...

Assessing the Risk of Poorly Configured, Internet-Exposed Protocols

by

In the Cybersecurity and Infrastructure Security Agency’s (CISA) “Shields Up” notice following Russia’s invasion of Ukraine, the agency recommended that organizations go back to...

Oklahoma Home Health Company Reports Email Security Breach, 21K Impacted

by

Healthback Holdings, a home health company based in Oklahoma, disclosed a healthcare data breach that impacted 21,114 individuals. Healthback discovered unauthorized activity within its employee email...

Amazon’s Potential Acquisition of One Medical Sparks Health Data Privacy, Security Concerns

by

Senator Josh Hawley (R-MO) wrote a letter to the Federal Trade Commission (FTC) asking it to investigate Amazon’s plans to purchase primary care organization One Medical, citing health data...

Geisinger, Kaiser Permanente, 35 Others Impacted By Third-Party Vendor Data Breach

by

OneTouchPoint (OTP), a third-party vendor that provides printing and mailing services to healthcare providers and health insurance carriers, disclosed a healthcare data breach that impacted 37...

Undefined Roles, Responsibilities For Medical Device Security Heighten Risks

by

Nearly 80 percent of 517 survey respondents did not consider their organization’s IoT and IoMT cybersecurity activities to be mature, research conducted by Cynerio and the Ponemon Institute...

Addressing Mobile Device Security Risks in Healthcare

by

Mobile device security risks have become a more prominent threat along with the rise of remote work. In fact, nearly half of more than 600 security professionals surveyed by Verizon in its new Mobile...

Phishing Attack at Allegheny Health Network Impacts 8K

by

Allegheny Health Network (AHN) and its parent company, Highmark Health, announced that a phishing attack had led to potential protected health information (PHI) exposure for approximately 8,000...

Meta Faces Another Lawsuit Over Health Data Privacy Practices

by

Meta is facing another lawsuit over its health data privacy practices. As previously reported, a report co-published by The Markup and STAT alleged that Meta (the parent company of Facebook)...

PracticeMax Ransomware Attack Impacts 258K at FL Urgent Care Center

by

Fast Track Urgent Care Center, which has a network of urgent care centers in Tampa Bay, Florida, began notifying 258,411 individuals of a 2021 ransomware attack that originated at its billing vendor,...

Healthcare Orgs Continue to Report Impacts Of Recent Third-Party Data Breaches

by

Third-party data breaches are continuing to overwhelm the healthcare sector, based on the current state of the HHS Office for Civil Rights (OCR) data breach portal. As organizations continue to report...

Avamere Health Services Data Breach Impacts 96 Practices, At Least 380K

by

Avamere Health Services, a group of independently-owned post-acute care companies that provide care for seniors, reported a data breach that impacted 96 practices and at least 380,000...