Jessica Davis

In a discussion with FDA official, Sen. Mark Warner shared his biggest healthcare cybersecurity concerns, what’s needed for his incentive program, and calls for a reset on security mindsets.

After reports detailing the scraping of hospital data by Meta Pixel tools and other tracking tech and several breach notices, OCR blasts the likely privacy violations and reminds providers of HIPAA requirements.

Proposed rulemaking from HHS aims to address care coordination and privacy challenges of substance use disorder patients under 42 CFR part 2, by aligning the rule with HIPAA.

This week’s healthcare data breach roundup includes an ongoing IT outage at One Brooklyn and a Community Health Network breach notice of unauthorized disclosure from its Pixel tool use.

Ten state attorneys general are asking Apple to address data privacy gaps in the wake of the U.S. Supreme Court abortion ruling by enacting stricter app standards and an auditing program.

The Lorenz ransomware threat group is known for its big-game hunting of larger organizations, with healthcare and public health entities among their successful targets, HHS HC3 warns.

A $3.75 million settlement has been proposed in the breach lawsuit against Forefront Dermatology, filed by the 2.41 million patients impacted by a Cuba threat group hack in 2021.

This week’s healthcare data breach roundup includes several additions to previously reported vendor incidents, including the Eye Care Leaders ransomware attack first reported in June.

Hive ransomware actors have successfully exploited over 1,300 businesses globally since June 2021, earning about $100 million in payments. A joint alert shares IOCs and evasive measures, particularly effective against the health sector.

A new inspector general report warns that HHS’ complex network of devices and agency partners make modernizing its cybersecurity approach a major challenge, and a business imperative.