Trending
More than 40 million people ask ChatGPT a healthcare-related question every day. OpenAI's ChatGPT Health and Anthropic's Claude for Healthcare are not HIPAA-compliant for consumers — and that is by design.
Ransomware
Sandhills Medical Foundation discloses a ransomware breach by Inc Ransom affecting 169,017 patients — nearly 12 months after the attack was detected and 10 months after stolen data was published publicly.
Data Breaches
The delayed 2026 notification of a massive 1.7-million-record exposure at Kettering Health highlights the "long tail" of healthcare ransomware, where the clinical recovery of a hospital often precedes the true regulatory and legal fallout by nearly a year. DAYTON, OH — A 2025 ransomware attack on Ohio-based Kettering
Settlements
HHS cracks down on four healthcare entities after risk analysis failures allowed PYSA and other ransomware to encrypt servers and exfiltrate patient data. WASHINGTON, D.C. — In a decisive move against systemic negligence in the medical sector, the HHS Office for Civil Rights (OCR) has announced a collective $1.165
Data Breaches
Minidoka Memorial Hospital transferred emergency patients after an imaging outage; a new ransomware group demands payment for an alleged 2.3 million files. RUPERT, ID — A quiet Easter morning in rural Idaho was shattered on April 5, 2026, when Minidoka Memorial Hospital (MMH) fell victim to a cyberattack that paralyzed
Data Breaches
UK Biobank's complete dataset exposed via three Chinese research institutions; listings removed after UK-China government intervention. LONDON, UK — In what is being described as a geopolitical health data security scandal, the UK government has confirmed that confidential medical and genomic data belonging to all 500,000 UK Biobank
Data Breaches
The developer of wireless cardiac pacing technology confirms unauthorized access to limited network data, joining a growing list of Australian healthcare targets in 2026. BRISBANE, AU — EBR Systems (ASX: EBR), a prominent medical technology firm specializing in wireless cardiac pacing, has officially reported a "contained" cybersecurity incident affecting
Data Breaches
Cookeville Regional Medical Center (CRMC) confirms a month-long unauthorized access incident that exposed sensitive medical records, Social Security numbers, and financial data. COOKEVILLE, TN — Cookeville Regional Medical Center (CRMC) has begun notifying 337,917 individuals that their highly sensitive personal and medical information was compromised during a sophisticated cyberattack. The
Trending
CVS Health subsidiary Aetna has disclosed two separate security incidents involving unauthorized access to member data. While distinct in their execution, both breaches highlight the persistent vulnerabilities within the healthcare sector's data management pipelines. HARTFORD, CT — Aetna, the Hartford-based health insurance giant owned by CVS Health, has filed
Data Breaches
Nacogdoches Memorial Hospital (NMH) has begun notifying over 257,000 individuals following a major cybersecurity breach that compromised sensitive personal and medical information. The East Texas healthcare provider confirmed that unauthorized actors gained access to its network, potentially exfiltrating a vast repository of patient data spanning several months of activity.
Data Breaches
CareCloud, Inc. (Nasdaq: CCLD), a prominent provider of cloud-based healthcare IT solutions, has disclosed a significant cybersecurity incident that may have compromised sensitive patient health records. In a Form 8-K filing with the U.S. Securities and Exchange Commission (SEC), the company reported a "material event" involving unauthorized