25 articles on HIPAA — privacy laws, security frameworks, and regulatory compliance.
HHS's Office for Civil Rights has now brought a dozen enforcement actions under its HIPAA Risk Analysis Initiative, and the agency has signaled the pr...
On June 3 and 4, 2026, the New York Senate and Assembly passed the New York Health Information Privacy Act (S-9269), a standalone statute governing 'r...
The extortion group ShinyHunters leaked roughly 234 GB of data tied to DentaQuest, the Sun Life-owned dental benefits administrator, exposing names, d...
OCR's four ransomware settlements announced in April 2026 — totaling $1.165 million across breaches affecting 427,000 individuals — share one root cau...
NYC Health + Hospitals confirmed a breach affecting 1.8 million individuals — including fingerprints and palm prints — originating through a third-par...
HHS OCR announced a $245,000 HIPAA settlement in April 2026 against a self-funded employer-sponsored group health plan following a 2021 ransomware att...
HHS OCR settled with MMG Fusion, LLC for $10,000 following a breach that exposed the protected health information of 15 million patients — one of the ...
The Oncology Institute disclosed on May 20, 2026 via SEC Form 8-K that a vendor had detected unauthorized access to information systems handling patie...
The HHS Office for Civil Rights targeted May 2026 for finalizing the first major HIPAA Security Rule update since 2013, but has not yet published a fi...
West Pharmaceutical Services detected a ransomware attack on May 4, 2026, disclosing via SEC 8-K that attackers exfiltrated data and encrypted systems...
The average ransom demand across confirmed healthcare incidents has surged to $16.9 million in 2026, up from under $600,000 the prior quarter. With 77...
A founder recently paid roughly $8,000 for an AI-assisted developer to build a healthcare MVP. Six weeks later they had a demo-ready product — login, ...
On February 16, 2026, HHS Office for Civil Rights commenced enforcement of the updated 42 CFR Part 2 rules governing substance use disorder treatment ...
The 2026 HIPAA Security Rule final update is expected in May with a 180-day compliance window. 42 CFR Part 2 enforcement began February 16, 2026. The ...
Two high-profile security incidents broke within hours of each other on April 19–20, 2026. Both involved AI platforms. Both exposed real customer data...
The proposed 2026 HIPAA Security Rule update is the most significant revision to federal healthcare cybersecurity requirements in over two decades. Ma...
In 2025, ransomware groups launched 1,174 publicly disclosed attacks—a 49% year-over-year increase—and healthcare bore the heaviest burden with 22% of...
A YC-backed compliance startup is accused of mass-producing fraudulent SOC 2, ISO 27001, HIPAA, and GDPR reports for hundreds of clients — and has now...
Analysis of the TriZetto Provider Solutions data breach affecting 3.4 million patients, examining HIPAA violations, the catastrophic 11-month detectio...
Stay ahead of evolving compliance requirements with our comprehensive analysis of 2025 regulatory trends. This guide offers strategic insights and pra...
Stay ahead of evolving compliance requirements with our comprehensive analysis of 2025 regulatory trends. This guide offers strategic insights and pra...
The Maine Data Privacy and Protection Act (MDPPA) takes effect July 1, 2025, providing robust consumer rights and imposing stringent obligations on bu...
In today's interconnected world, the healthcare industry relies heavily on digital systems for everything from patient records to medical devices. Thi...
Introduction: The advent of Artificial Intelligence (AI) has been a game-changer across a spectrum of industries, healthcare being one of the most sig...
In recent years, a major player in the landscape of health care providers, Refuah Health Center, located in New York, has faced significant consequenc...