SC Health

After the Supreme Court overturned Roe v. Wade, Google committed to modifying data retention policies for sensitive locations that could put users at risk.

New York’s investigation into Practicefirst Medical after a reported breach impacting 1.2 million individuals found serious security program failures, including a failed software patch.

HIPAA requires entities to disclose breaches within 60 days, but it took 18 months for Apria Healthcare to inform over 1.8 million patients.

The FBI is working with the Louisville-based health network as it works to recover from a May 9 cyberattack. This week’s healthcare data breach roundup also includes a hack of PillPack accounts.

In a new policy statement, the FTC vowed to combat deceptive practices tied to biometric data collection and marketing, while proposing to tighten its FTC Health Breach Notification Rule.

It’s the second proposed action taken under the FTC’s Health Breach Notification Rule and third complaint against a health app developer this year, signaling more developer scrutiny ahead.

It’s the third settlement reached between EyeMed and states in the wake of a massive data breach in 2020, caused, in part, by employees sharing email account credentials.

An OCR audit into MedEvolve after a 2018 healthcare data breach found a business associate of several possible HIPAA violations, including failing to conduct a risk analysis.

Senate bill proposes creating a rural hospital cybersecurity workforce development plan to address healthcare gaps in finding and retaining skilled cyber professionals.

Affiliates are given access to a detailed admin dashboard with all the bells and whistles to make extorting their victims a breeze.