16 articles on ransomware — privacy laws, security frameworks, and regulatory compliance.
In June 2026, the cybercrime group ShinyHunters breached Madison Square Garden Sports and affiliated MSG entities, claiming more than 26 million custo...
ShinyHunters breached Instructure's Canvas learning platform, exposing data tied to hundreds of millions of users across roughly 8,800 institutions an...
HHS' Office for Civil Rights resolved four ransomware-related HIPAA investigations affecting roughly 427,000 individuals and imposed $1,165,000 in pen...
HHS's Office for Civil Rights has now brought a dozen enforcement actions under its HIPAA Risk Analysis Initiative, and the agency has signaled the pr...
OCR's four ransomware settlements announced in April 2026 — totaling $1.165 million across breaches affecting 427,000 individuals — share one root cau...
May 2026 saw 95 publicly disclosed ransomware attacks across 17 countries, with Qilin and ShinyHunters leading a campaign that increasingly skips encr...
HHS OCR announced a $245,000 HIPAA settlement in April 2026 against a self-funded employer-sponsored group health plan following a 2021 ransomware att...
The 2026 Verizon Data Breach Investigations Report analyzed more than 22,000 confirmed breaches and found that vulnerability exploitation now accounts...
West Pharmaceutical Services detected a ransomware attack on May 4, 2026, disclosing via SEC 8-K that attackers exfiltrated data and encrypted systems...
The UK Information Commissioner's Office fined South Staffordshire Water's parent company £963,900 in May 2026 for security failings exposed by the Cl...
The average ransom demand across confirmed healthcare incidents has surged to $16.9 million in 2026, up from under $600,000 the prior quarter. With 77...
CISA's final rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) is expected in May 2026, though federal a...
In late April and early May 2026, Cushman & Wakefield confirmed a cyberattack originating from a voice phishing operation that gave ShinyHunters acces...
ShinyHunters breached Instructure's Canvas learning management system twice in May 2026, stealing an estimated 275 million records — names, email addr...
The Trump administration's March 2026 cyber strategy and executive order on cyber-enabled crime signal a fundamental policy pivot: less regulatory fri...
In 2025, ransomware groups launched 1,174 publicly disclosed attacks—a 49% year-over-year increase—and healthcare bore the heaviest burden with 22% of...