New & Notable
OIG audit reveals web app security weaknesses at large hospital
Weak authentication and input validation controls made certain web apps at a large hospital in the Southeast vulnerable to cyberattacks, OIG said.
AI-powered insurance platform breach impacts 3.1M individuals
HCIactive, a company that offers AI-powered administrative solutions, reported a multi-million-record breach to state regulators.
Cyberthreat actors shift from ransomware to patient extortion: Report
As the healthcare attack surface rapidly expands, cyberthreat actors are now favoring triple extortion, service disruption and individual patient extortion, Trellix observed.
OIG calls on HHS to strengthen cybersecurity across divisions
In an annual report, OIG highlighted persistent healthcare cybersecurity challenges and urged HHS to unify its approach to cybersecurity across the department.
Healthcare Strategies: A Podcast
-
A podcast for healthcare professionals seeking solutions to today's and tomorrow's top challenges. Hosted by the editors of Xtelligent Healthcare Media, this podcast series focuses on real-world use cases that are leading to tangible improvements in care quality, outcomes, and cost.
Guests from leading provider, payer, government, and other organizations share their approaches to transforming healthcare in a meaningful and lasting way.
View All Episodes
Latest News
-
OCR settles 54th HIPAA right of access case
Occupational health services provider Concentra will pay OCR $112,500 to resolve alleged HIPAA right of access failures.
-
Providers urge HHS to scrap proposed HIPAA Security Rule updates
Over 100 provider organizations signed a letter urging HHS to rescind its proposed updates to the HIPAA Security Rule and instead work with the industry to develop cybersecurity standards.
-
Mirion Medical issues patches for five high-severity vulnerabilities
Successful exploitation of the vulnerabilities found in Mirion Medical's EC2 Software NMIS BioDose software could allow attackers to gain access to sensitive information, CISA said.
-
Kaiser settles class-action web tracking lawsuit for $46M
Kaiser Permanente's health plan settled a class action lawsuit concerning a 2024 breach that stemmed from its alleged use of web trackers within its websites and patient portals.
-
Updated contract language template tackles medtech security blind spots
HSCC's updated model contract language template aims to improve the relationship between healthcare organizations and medical device manufacturers by clarifying cybersecurity obligations.
-
Report: Healthcare cyberattacks surge on holidays, weekends
Cyberthreat actors are taking advantage of the reduced cybersecurity staffing that often comes along with holidays, weekends and material corporate events, data shows.
Features
-
AI adoption in healthcare will spark innovation and cyber risk in 2026
In 2026, AI will continue to drive innovation, highlighting cybersecurity, privacy and governance gaps in the process.
-
10 largest healthcare data breaches reported to OCR in 2025
More than 20 million individuals were affected by the 10 largest healthcare data breaches reported to OCR in 2025.
-
Governance gaps threaten progress as healthcare AI adoption grows
Health systems are relying on AI faster than their governance structures can evolve, expanding the potential for data privacy gaps and regulatory risk, experts say.
-
After Texas ruling, states seek to fill reproductive health data privacy gaps
In the absence of federal protections, legal experts have their eyes on states laws that dictate how companies can interact with reproductive health data.