Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Veradigm Third-Party Breach: Defending Healthcare PHI Against Vendor Compromise and Extortion Threats
Veradigm Third-Party Breach: What Healthcare Defenders Need to Know Veradigm — the Chicago-based practice management and electronic health r...
Central Maine Medical Center & Susan B. Allen Memorial Hospital Breach Settlements: Defensive Lessons for Healthcare Security Teams
Introduction Central Maine Medical Center and Susan B. Allen Memorial Hospital have agreed to settle class action lawsuits arising from data...
Ransomware Breaches at Five U.S. Healthcare Providers: Detection and Hardening Guide for Defenders
Five healthcare providers — Alta Orthopaedics in California, Cornerstone Behavioral Healthcare in Maine, Cameron Regional Medical Center in ...
Novocure Cyberattack Exposes Patient and Employee Data: Detection, HIPAA Response, and Defense Guide for Healthcare Organizations
Novocure Data Breach: What Happened and Why It Matters Novocure, the medical technology and oncology company known for its tumor treating fi...
Nutex Health Data Breach: Patient and Employee Data Exfiltrated — Detection and Response Guide for Healthcare Defenders
Nutex Health, a US-based operator of micro-hospitals and hospital outpatient departments, has confirmed that a third party exfiltrated sensi...
Nutex Health Ransomware Breach: Detection and Response Guidance After Gang Claims Theft of Patient, Employee, and Financial Data
What Happened Nutex Health, a Houston-based operator of micro-hospitals and hospital outpatient departments, has disclosed to the U.S. Secur...
ShinyHunters Claims 284M Record Theft from McKesson — Healthcare Defenders' Detection and Response Playbook
Introduction McKesson Corporation — one of the largest healthcare distributors in North America and a critical artery of the U.S. pharmaceut...
FTC/State Action on Him & Hers: Defending Against Unauthorized Telehealth Data Sharing
FTC/State Action on Him & Hers: Defending Against Unauthorized Telehealth Data Sharing Introduction The Federal Trade Commission (FTC), alon...
CPSC Hospital Data Requests: Defending Against Unintended PHI Disclosures
Introduction The U.S. Consumer Product Safety Commission (CPSC) is actively requesting digital patient data from hospital emergency rooms as...