Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CPAP Medical Supplies Data Breach Settlement: $500K HIPAA Class Action — Detection and Hardening Guide for Healthcare Defenders
Introduction CPAP Medical Supplies and Services, a Jacksonville, Florida-based provider of durable medical equipment (DME) for sleep apnea t...
Saber Healthcare and Buchalter Data Breaches: HIPAA Detection, Containment, and Third-Party Risk Hardening Guide
Introduction Two new breach disclosures — one from Saber Healthcare, an Ohio-based skilled nursing and senior care operator, and one from Bu...
Mental Health Association Data Breach Settlement: Defending HIPAA-Covered Behavioral Health Data After a Breach
The Mental Health Association (MHA), a Chicopee, Massachusetts-based human services agency providing substance use recovery programs and sup...
H1 2026 Healthcare Data Breach Report: 5.9% Decline Is No Reason to Relax — Defensive Priorities for HIPAA-Covered Entities
The HIPAA Journal's H1 2026 Healthcare Data Breach Report shows a 5.9% decline in reported healthcare breaches compared to the first half of...
WPM Pathology Laboratory and Salina Regional Health Center Breach Settlement: Defensive Lessons from a Targeted Healthcare Cyberattack
A Settlement That Tells a Bigger Story WPM Pathology Laboratory and Salina Regional Health Center have agreed to settle class action litigat...
Astrana Health Social Engineering Breach: Detection and Hardening Guide for Healthcare Defenders
When a publicly traded healthcare company files an 8-K with the SEC over a social engineering incident, the rules of the game have changed. ...
DC Medicaid Data Exposure: ~400,000 Beneficiaries' PII Published on a Public Website — Detection and Hardening Guide
Nearly 400,000 Beneficiaries Exposed — Without a Single Exploit The District of Columbia Department of Health Care Finance (DHCF) is notifyi...
Modoc Medical Center Cybersecurity Incident: Healthcare Breach Detection and Hardening Playbook
Introduction Modoc Medical Center, a critical access hospital in Alturas, California, has announced a cybersecurity incident affecting its s...
Wayne Memorial Hospital & Regional Urology Data Breach Settlements: Lessons in PHI Exposure Detection and HIPAA Breach Defense
Introduction Two more healthcare organizations — Wayne Memorial Hospital in Georgia and Regional Urology in Louisiana — have agreed to settl...