Tag healthcare

Email Vulnerabilities Persist in the Healthcare Sector

Email Security & Protection, Fraud Management & Cybercrime, Healthcare Mindpath Health Settles Claim for $3.5 Million; Delta Dental Notifies 146,000 of Breach Marianne Kolbasuk McGee (HealthInfoSec) • November 24, 2025 Email compromises remain a significant concern in the healthcare sector, frequently leading to substantial data breaches and ensuing class action…

Read MoreEmail Vulnerabilities Persist in the Healthcare Sector

Is Your Medical Device Secure? Ensure Proper Contract Language

Endpoint Security, Governance & Risk Management, Healthcare HSCC’s Updated Model Contract Aims for Shared Cyber Risk Among Providers and Device Manufacturers Marianne Kolbasuk McGee (HealthInfoSec) • November 21, 2025 The HSCC’s revised model contract for medical device cybersecurity is designed to aid healthcare entities and manufacturers in negotiating shared risks…

Read MoreIs Your Medical Device Secure? Ensure Proper Contract Language

Inside the Staffing Crisis Harming CISA

Government, Healthcare, Industry Specific Also: Akira Ransomware Targets Healthcare, AI’s Sycophancy Becomes a Security Risk Anna Delaney (annamadeline) • November 21, 2025 Clockwise, from top left: Anna Delaney, Tony Morbin, Chris Riotta, and Marianne Kolbasuk McGee This week’s ISMG Editors’ Panel convened a discussion among four seasoned editors, who addressed…

Read MoreInside the Staffing Crisis Harming CISA

Omni Family Health Reaches $6.5M Settlement in 2024 Hack Lawsuits

Data Privacy, Data Security, Healthcare Sensitive Data of Nearly 470,000 Patients and Employees Potentially Exposed on Dark Web Marianne Kolbasuk McGee (HealthInfoSec) • November 18, 2025 Omni Family Health, a nonprofit operating approximately 40 community health centers in California, has reached a $6.5 million settlement over a 2024 cyber incident…

Read MoreOmni Family Health Reaches $6.5M Settlement in 2024 Hack Lawsuits

HSCC Guidance for Navigating AI Cybersecurity Risks in the Health Sector

Artificial Intelligence & Machine Learning, Healthcare, Industry Specific Guidance Documents Highlight 5 Key Risk Areas and Best Practices for AI in Healthcare Marianne Kolbasuk McGee (HealthInfoSec) • November 12, 2025 The Health Sector Coordinating Council has previewed upcoming materials aimed at helping the healthcare sector address the cyber risks associated…

Read MoreHSCC Guidance for Navigating AI Cybersecurity Risks in the Health Sector

Synnovis Alerts UK Providers About 2024 Data Theft Incident

Data Breach Notification, Data Security, Fraud Management & Cybercrime Ransomware Attack on British Pathology Lab Disrupted Patient Care for Months Marianne Kolbasuk McGee (HealthInfoSec) • November 11, 2025 Synnovis has begun notifying UK healthcare providers about potential patient data breaches stemming from the lab’s 2024 ransomware attack. (Image: Synnovis) Following…

Read MoreSynnovis Alerts UK Providers About 2024 Data Theft Incident

State Imposes $5.1M Penalty on Firm for Data Breach Impacting 3 Million Students

Data Privacy, Data Security, Healthcare State Authorities Highlight Security Lapses Leading to Illuminate Education’s Late 2021 Data Breach Marianne Kolbasuk McGee (HealthInfoSec) • November 10, 2025 Illuminate Education faces a $5.1 million settlement after a cyberattack in late 2021 that compromised data of over 3 million students. (Image: Illuminate) A…

Read MoreState Imposes $5.1M Penalty on Firm for Data Breach Impacting 3 Million Students

Ransomware Group FIN12 Intensifies Attacks on Healthcare Sector

A financially motivated threat group, identified as FIN12, has been linked to a series of RYUK ransomware incidents since October 2018. This organization demonstrates significant collaboration with TrickBot-affiliated actors while utilizing publicly accessible tools like Cobalt Strike Beacon payloads to penetrate victim networks. Cybersecurity firm Mandiant has attributed these security…

Read MoreRansomware Group FIN12 Intensifies Attacks on Healthcare Sector

Yale New Haven Health to Pay $18 Million to Resolve Hacking Lawsuit

Data Privacy, Data Security, Healthcare March Breach Affected Nearly 5.6 Million; NextGen Proposed Settlement Also Reached Marianne Kolbasuk McGee (HealthInfoSec) • October 24, 2025 Yale New Haven Health System, Connecticut’s largest healthcare network, has agreed to pay $18 million to settle class action litigation stemming from a March breach impacting…

Read MoreYale New Haven Health to Pay $18 Million to Resolve Hacking Lawsuit