New & Notable
OCR director defends HIPAA updates: "The cost of doing nothing is very high"
OCR Director Paula M. Stannard addressed concerns about proposed HIPAA Security Rule updates, but said OCR has yet to decide which, if any, of the proposals will ultimately be finalized.
Stryker experiencing widespread outage due to cyberattack
The medtech company confirmed on Wednesday that it was experiencing a global network disruption to its Microsoft environment.
— MedTech Dive
Managing shadow AI risks as healthcare embraces innovation
At HIMSS, experts spoke about managing shadow AI risk with governance, education and technical safeguards.
LexisNexis expands Epic integration with identity verification capabilities
The additional identity verification capabilities will integrate with Epic MyChart, enabling hospitals to choose which capabilities they want in order to meet their risk requirements.
Healthcare Strategies: A Podcast
-
A podcast for healthcare professionals seeking solutions to today's and tomorrow's top challenges. Hosted by the editors of Xtelligent Healthcare Media, this podcast series focuses on real-world use cases that are leading to tangible improvements in care quality, outcomes, and cost.
Guests from leading provider, payer, government, and other organizations share their approaches to transforming healthcare in a meaningful and lasting way.
View All Episodes
Latest News
-
McLaren Health agrees to $14M settlement over two data breaches
The settlement stemmed from two separate ransomware attacks that McLaren Health Care experienced in 2023 and 2024.
-
New Sequoia Project guidance takes aim at state-level patient consent challenges
The Sequoia Project emphasized the importance of aligning state-level health data laws with national technical standards to ease patient consent challenges.
-
OIG audit reveals web app security weaknesses at large hospital
Weak authentication and input validation controls made certain web apps at a large hospital in the Southeast vulnerable to cyberattacks, OIG said.
-
AI-powered insurance platform breach impacts 3.1M individuals
HCIactive, a company that offers AI-powered administrative solutions, reported a multi-million-record breach to state regulators.
-
Cyberthreat actors shift from ransomware to patient extortion: Report
As the healthcare attack surface rapidly expands, cyberthreat actors are now favoring triple extortion, service disruption and individual patient extortion, Trellix observed.
-
OIG calls on HHS to strengthen cybersecurity across divisions
In an annual report, OIG highlighted persistent healthcare cybersecurity challenges and urged HHS to unify its approach to cybersecurity across the department.
Features
-
AI adoption in healthcare will spark innovation and cyber risk in 2026
In 2026, AI will continue to drive innovation, highlighting cybersecurity, privacy and governance gaps in the process.
-
10 largest healthcare data breaches reported to OCR in 2025
More than 20 million individuals were affected by the 10 largest healthcare data breaches reported to OCR in 2025.
-
Governance gaps threaten progress as healthcare AI adoption grows
Health systems are relying on AI faster than their governance structures can evolve, expanding the potential for data privacy gaps and regulatory risk, experts say.
-
After Texas ruling, states seek to fill reproductive health data privacy gaps
In the absence of federal protections, legal experts have their eyes on states laws that dictate how companies can interact with reproductive health data.