New & Notable

PharMerica settles data breach lawsuit for $5.2M

Long-term care pharmacy network PharMerica suffered a data breach in 2023 that impacted more than 5.8 million individuals.

The University of Hawaii Cancer Center told state regulators that it paid a ransom to obtain a decryption tool and secure stolen patient data.

A consistent barrage of small healthcare data breaches defined 2025, rather than the high-impact breaches that dominated prior years.

Healthcare organizations are seeking IoT security solutions that offer asset visibility, as well as robust segmentation and monitoring capabilities.

A podcast for healthcare professionals seeking solutions to today's and tomorrow's top challenges. Hosted by the editors of Xtelligent Healthcare Media, this podcast series focuses on real-world use cases that are leading to tangible improvements in care quality, outcomes, and cost.

Guests from leading provider, payer, government, and other organizations share their approaches to transforming healthcare in a meaningful and lasting way.
View All Episodes

Providers urge HHS to scrap proposed HIPAA Security Rule updates

Over 100 provider organizations signed a letter urging HHS to rescind its proposed updates to the HIPAA Security Rule and instead work with the industry to develop cybersecurity standards.
Mirion Medical issues patches for five high-severity vulnerabilities

Successful exploitation of the vulnerabilities found in Mirion Medical's EC2 Software NMIS BioDose software could allow attackers to gain access to sensitive information, CISA said.
Kaiser settles class-action web tracking lawsuit for $46M

Kaiser Permanente's health plan settled a class action lawsuit concerning a 2024 breach that stemmed from its alleged use of web trackers within its websites and patient portals.
Updated contract language template tackles medtech security blind spots

HSCC's updated model contract language template aims to improve the relationship between healthcare organizations and medical device manufacturers by clarifying cybersecurity obligations.
Report: Healthcare cyberattacks surge on holidays, weekends

Cyberthreat actors are taking advantage of the reduced cybersecurity staffing that often comes along with holidays, weekends and material corporate events, data shows.
Geisinger Health, Nuance reach $5M settlement over data breach

Geisinger Health and Microsoft-owned Nuance Communications reached a proposed $5 million settlement tied to a 2023 insider data breach.

Securing healthcare data in preparation for a post-quantum era

A post-quantum world may seem far off, but experts say that healthcare leaders should begin planning now to ensure that health data is protected.
Preparing EHR systems for ransomware attacks

Experts weigh in on how proactive cybersecurity planning protects your patients.
Insider threats: How health systems can stop EHR snooping

Cyber threats can come from within a hospital's workforce, and proper training is required to stop them from stealing valuable patient data in electronic health records.
Shadow AI in healthcare: The hidden risk to data security

In addition to traditional shadow IT, shadow AI can make healthcare organizations vulnerable to patient data exposure and compliance troubles.