Trending
The Iowa Department of Health and Human Services (HHS) has confirmed that sensitive personal and health information was inadvertently made accessible online, marking a significant breach of Medicaid member privacy. DES MOINES, IA — The Iowa Department of Health and Human Services (HHS) is notifying more than 6,700 Medicaid members
Trending
CVS Health subsidiary Aetna has disclosed two separate security incidents involving unauthorized access to member data. While distinct in their execution, both breaches highlight the persistent vulnerabilities within the healthcare sector's data management pipelines. HARTFORD, CT — Aetna, the Hartford-based health insurance giant owned by CVS Health, has filed
Cyber Attacks
The suspension of digital systems at a major Massachusetts healthcare provider has forced a transition to manual workflows and the redirection of emergency medical services. BROCKTON — Signature Healthcare, the parent organization of Brockton Hospital, confirmed on April 7, 2026, that a cybersecurity incident has disrupted its clinical and administrative operations.
Netherlands
AMSTERDAM — A massive ransomware attack on ChipSoft, the Netherlands’ primary provider of Electronic Patient Record (EPD) software, has disrupted operations at dozens of hospitals and specialist clinics across the country. The breach has forced several high-profile medical institutions, including the Prinses Máxima Center, to implement emergency protocols as access to
Data Breaches
Nacogdoches Memorial Hospital (NMH) has begun notifying over 257,000 individuals following a major cybersecurity breach that compromised sensitive personal and medical information. The East Texas healthcare provider confirmed that unauthorized actors gained access to its network, potentially exfiltrating a vast repository of patient data spanning several months of activity.
Data Breaches
CareCloud, Inc. (Nasdaq: CCLD), a prominent provider of cloud-based healthcare IT solutions, has disclosed a significant cybersecurity incident that may have compromised sensitive patient health records. In a Form 8-K filing with the U.S. Securities and Exchange Commission (SEC), the company reported a "material event" involving unauthorized
Data Breaches
Aroostook Mental Health Services, Inc. (AMHC), a critical behavioral health provider in Northern Maine, confirmed Wednesday that its digital infrastructure was targeted in a sophisticated ransomware attack. Cybersecurity researchers have attributed the intrusion to Qilin, a Russian-speaking threat actor group known for aggressive data exfiltration and extortion tactics. Service Disruptions
Cyber Attacks
Global pharmaceutical leader AstraZeneca is investigating claims of a significant data breach after a cybercrime group alleged it successfully exfiltrated sensitive internal information, including proprietary source code and clinical data. The extortion group, identified by security researchers as a contingent of the Lapsus$ hacking collective, posted evidence of the alleged
Data Breaches
Navia Benefit Solutions, a prominent administrator of health and employee benefits, has disclosed a major data breach affecting approximately 2.7 million people. The incident, involving unauthorized access to a database containing sensitive personal and health-related information, underscores the growing vulnerability of third-party benefit administrators in the healthcare supply chain.
Policy & Government
U.S. lawmakers are advancing new legislation aimed at strengthening cybersecurity defenses across the healthcare sector, responding to a growing wave of cyberattacks that have exposed patient data and disrupted critical medical services nationwide. The effort follows several high-profile breaches in recent years, most notably the 2024 ransomware attack on