Collaborate Disseminate
When you have been reporting on breaches for as long as this site has, you experience a lot of deja vu. This time, a headline about Singing River Health System in Mississippi spotting a potential attack early and taking action triggered it. The Magnoli… Continue reading Singing River Health System temporarily shut down access to patient medical records
Eric Geller reports: A Cybersecurity and Infrastructure Security Agency program that warns organizations about imminent ransomware attacks has suffered a major setback after its lead staffer left the agency rather than take a forced reassignment. David… Continue reading CISA loses key employee behind early ransomware warnings
Arielle Waldman reports: Opposition is building as industry organizations weigh in on the public comment period for proposed changes to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. In January 2025, the US Department of… Continue reading Industry Continues to Push Back on HIPAA Security Rule Overhaul
From the U.S. Department of Justice: An Arizona man was sentenced Friday to 15 years in prison and ordered to pay more than $452 million in restitution for conspiring to defraud Medicare and other federal health care benefit programs of more than $1 bi… Continue reading CEO of Health Care Software Company Sentenced for $1B Fraud Conspiracy
From the U.S. Attorney’s Office, Northern District of Georgia: Fraud ring responsible for more than $28 million in unauthorized bank transfers from U.S. victims The Justice Department today announced the seizure of a web domain and database used … Continue reading Justice Department Announces Seizure of Stolen-Password Database Used in Bank Account Takeover Fraud
Odia Kagan of FoxRothschild writes: If you are a government contractor offering government agencies products utilizing Large Language Models (LLM), your disclosure requirements just increased. Per a new memo from the Office of the Management of the Bud… Continue reading New OMB Memo Imposes Detailed New Disclosure Requirement on Government Contractors Utilizing LLMs
Ashden Fein, Caleb Skeath, John Webster Leslie, and Krissy Chapman of Covington and Burling write: On December 11, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) released its Cybersecurity Performance Goals 2.0 (“CPG 2.0”), an… Continue reading CISA Releases Cybersecurity Performance Goals 2.0 for Critical Infrastructure
Today’s reminder that even when the government audits school districts and issues recommendations, they don’t necessarily implement them fully, leaving them still vulnerable. In September 2023, DataBreaches noted a June 2023 audit report on… Continue reading Hilton Central School District – Audit Follow-Up (2022M-200-F)
Baker University in Kansas issued a press release this week about a data breach In December 2024. The statement includes: In December 2024, Baker discovered suspicious activity related to certain systems which resulted in a network outage. Baker took i… Continue reading Baker University discloses December 2024 breach
WBRZ reports: The Louisiana Office of Student Financial Assistance sent out a letter to students warning them of a “data security incident” involving their information. The letter, dated Dec. 5, said the office is investigating an incident … Continue reading LOSFA sends out letter to students warning of ‘data security incident’ involving information