Collaborate Disseminate
Steve Alder reports: HCA Healthcare Inc. has agreed to settle class action litigation stemming from a July 2023 data breach that was reported to the HHS’ Office for Civil Rights as affecting 11,270,000 patients. The affected individuals had received he… Continue reading HCA Healthcare settled two lawsuits this week; one was over its 2023 data breach
On August 1, Highlands Oncology Group in Arkansas notified the Maine Attorney General’s Office of a ransomware attack it discovered on June 2, when certain files and systems were inaccessible. Investigation into the incident revealed that there h… Continue reading Highlands Oncology Group notifies 113,575 people after ransomware attack by Medusa
Ashden Fein, Caleb Skeath, Micaela McMurrough, Emily Pehrsson, and Sierra Stubbs of Covington and Burling write: Oklahoma recently enacted Senate Bill 626, which substantially amends the state’s data breach notification law to broaden the scope of noti… Continue reading Oklahoma Substantially Amends Its Data Breach Notification Statute
“Information… has not been confirmed.” — Victim “Hold my beer.” — Hacker Daryna Antoniuk reports: Hackers have leaked flight records allegedly belonging to the CEO of the Russian airline Aeroflot following a ma… Continue reading Hackers leak purported Aeroflot data as Russia denies breach
David Jones reports: Researchers from Palo Alto Networks say they are investigating a ransomware attack related to the recently disclosed ToolShell vulnerabilities in Microsoft SharePoint. The hackers left the victim a ransom note on Sunday claiming th… Continue reading Palo Alto Networks investigating ransomware threat related to SharePoint exploitation
On January 20, 2025 Mt. Baker Imaging and Northwest Radiologists in Washington State (collectively, “Northwest Radiologists”) experienced a network intrusion that they discovered on January 25. Although media reported on the incident on Jan… Continue reading Six months after discovering an attack, Northwest Radiologists notifies almost 350,000 Washington State residents
Jessica Lyons reports: Ransomware gangs now frequently threaten physical violence against employees and their families as a way to force victim organizations into paying their demands. According to a survey of 1,500 security and IT professionals conduc… Continue reading As ransomware gangs threaten physical harm, ‘I am afraid of what’s next,’ ex-negotiator says
Steve Alder writes: Several dermatology practices have recently announced data breaches following an attack on their management company. The number of attacks reported this year by dermatology practices suggests they are being targeted by one or more t… Continue reading Dermatology Clinics Affected by Practice Management Company Data Breach
The PA News Agency reports: A medical professional who used a patient’s personal data to visit her home with a gift while working as a vaccinator has been struck off the register. Josep Bofill Blanch, who was a registered physiotherapist employed by NH… Continue reading UK: Physiotherapist who accessed patient’s personal data to visit her home is struck off
Genoa Community Hospital, aka Genoa Medical Facilities (“Genoa“) in Nebraska has issued a press release concerning a breach involving patient data. According to the release, in March 2025, Genoa learned of unusual activity involving one emp… Continue reading Genoa Community Hospital discloses breach discovered in March