Healthcare Cybersecurity

Flat white line-art of a large medical-records folder beside a sealed mailed notice, on a deep-blue background — CareCloud medical-records breach notifications.

Data Breaches

CareCloud Notifying Hundreds of Thousands After Medical Records Theft

From breach to notification — CareCloud contacts hundreds of thousands this week.

Flat white line-art of a large tooth-shaped folder beside a sealed mailed notice, on a teal background — DentaQuest data breach disclosure.

Data Breaches

DentaQuest Data Breach Potentially Impacts Over 23 Million People

From May intrusion to July disclosure — one of 2026's largest healthcare breaches lands this week.

Editorial illustration of a hospital billing ledger with pages pulled out, marking Craneware's disclosure of data theft affecting US hospital finance software.

Data Breaches

Craneware Discloses Data Theft Affecting US Hospital Finance Software

A financial-software provider serving thousands of US hospitals confirms significant data theft — sector-advisory coverage this week.

Flat white line-art of a cloud shape linked to a stack of patient record cards — AdaptHealth cloud-systems compromise affecting patient data.

Data Breaches

AdaptHealth Discloses Cloud-Systems Compromise Affecting Patient Data

Another healthcare-sector cloud-compromise disclosure — sector-advisory work this week. AdaptHealth says attackers reached its cloud systems and accessed patient data, with social engineering reported as the initial-access route.

Flat white line-art of a medical cross health card, an envelope with a hook, and a record folder — Xsolis healthcare phishing breach disclosure.

Healthcare Cybersecurity

Phishing Attack on Healthcare Firm Xsolis Affects 1.4 Million People

Another healthcare-sector disclosure at scale — a single phishing email at an AI utilization-management vendor exposed the protected health information of nearly 1.4 million patients, and it reads as sector-advisory work for the week.

Flat white line-art of a large heart-monitor patch outline beside an open record card — iRhythm patient-records data breach disclosure.

Healthcare Cybersecurity

iRhythm Discloses Data Breach Affecting Patient Records: Sector-Advisory Work Begins

A medical-device company's patient-records disclosure — sector-advisory work begins. iRhythm told the SEC a threat actor obtained patient protected health information from third-party-hosted business applications, and judged the incident material.

Flat white line-art of a medical research flask, a server database, and a shield — GTIG China-nexus research-sector advisory.

Nation-State Cyber Threats

Google Threat Intel Details a China-Nexus Cluster Targeting Medical, Military, and AI Research

GTIG's published research resets sector advisory work for research organizations across North America, putting REDCap servers and Google Workspace administrative rules at the top of the review list.

Flat white line-art of a clinical document beside a database cylinder with an open padlock — Novo Nordisk clinical-trial data breach.

Data Breaches

Novo Nordisk Cyberattack: Clinical Trial Data Stolen from Pharma Giant

Pharma giant Novo Nordisk discloses a clinical-trial data theft on the same day UK regulators greenlight its Wegovy pill — a reminder of the sector's persistent threat profile.

Flat white line-art of a tooth icon beside a stack of records folders with an open padlock — DentaQuest 2.6 million-account breach.

Data Breaches

DentaQuest Breach Hits 2.6 Million as ShinyHunters Leaks a 234 GB Data Trove

DentaQuest, a Sun Life dental-benefits administrator serving 35 million people, confirmed a breach of 2.6 million accounts after ShinyHunters leaked about 234 GB of data — including names, dates of birth, Medicaid IDs and health-insurance information.

Hospital silhouette, EHR record cards, ticking clock. Red dot as alert on the delayed notification envelope at center.

Data Breaches

Cerner Discovered the Breach in February 2025. Atrium Health Patients Found Out 15 Months Later

Cerner discovered the breach in February 2025. Atrium Health patients only learned this week. The 15-month gap — across 16 health systems through one Oracle-owned vendor — is the year's clearest HIPAA business-associate accountability test.

See all

CareCloud Confirms 350,000+ Affected in AWS Environment Breach

CareCloud Notifying Hundreds of Thousands After Medical Records Theft

DentaQuest Data Breach Potentially Impacts Over 23 Million People

Craneware Discloses Data Theft Affecting US Hospital Finance Software

AdaptHealth Discloses Cloud-Systems Compromise Affecting Patient Data

Phishing Attack on Healthcare Firm Xsolis Affects 1.4 Million People

iRhythm Discloses Data Breach Affecting Patient Records: Sector-Advisory Work Begins

Google Threat Intel Details a China-Nexus Cluster Targeting Medical, Military, and AI Research

Novo Nordisk Cyberattack: Clinical Trial Data Stolen from Pharma Giant

DentaQuest Breach Hits 2.6 Million as ShinyHunters Leaks a 234 GB Data Trove

Three Breaches in One Day Expose the Two Failures Driving 2026: Repeat Victims and Vendor Risk

Cerner Discovered the Breach in February 2025. Atrium Health Patients Found Out 15 Months Later