UnitedHealth Group said it is seeking repayment of “interest-free” advances distributed to providers struggling during the shutdown of claims processing caused by the ransomware attack on Change Healthcare. 

The company said part of its network has been encrypted. However, it told the Securities and Exchange Commission it is still able to deliver dialysis care to patients. 

The academic medical center is accused of deploying lax security protocols that allowed an employee to access internet-connected cameras and private emails in acts of privacy invasion that lasted a decade. 

Questions remain about the alleged breach on a legacy server at Oracle Health, as the nature of the attacks and scope of stolen data are still being investigated. 

There are at least 65 consolidated cases pending in federal courts that stem from the 2024 data breach on the claims processor's network. A judge in Minnesota has asked that the lawsuits be coordinated and consolidated as much as possible. 

A regional chain of clinics that lied through its teeth about a data breach has agreed to pay a $350,000 settlement to resolve multiple allegations it violated HIPAA. 

Phishing incidents were the most common type of attack on a healthcare entity, which is consistent with what's seen across all industries. 

According to lawyers representing two of the plaintiffs, a shared EHR portal was used by a physical therapist at KU Health to access the sensitive photographs in what is being investigated as a data breach.