| Editor's Choice: Cybersecurity | In a post on the dark web, well-known hacker group Interlock is offering a 941 GB trove for sale, said to contain patient financial records, driver's licenses, clinical summaries and more from Ohio-based Kettering Health. In a post on the dark web, well-known hacker group Interlock is offering a 941 GB trove for sale, said to contain patient financial records, driver's licenses, clinical summaries and more from Ohio-based Kettering Health. | | |
| CureIS, a company that supports healthcare providers who take Medicaid and Medicare, is accusing the EHR leader of data blocking and other anti-competitive practices that violate state and federal laws. CureIS, a company that supports healthcare providers who take Medicaid and Medicare, is accusing the EHR leader of data blocking and other anti-competitive practices that violate state and federal laws. | | |
| One Medical, a chain of primary care clinics owned by Amazon, is being sued by the family of a man who died due to alleged provider negligence. Now, court filings reveal staff improperly accessed the deceased man's protected medical records. One Medical, a chain of primary care clinics owned by Amazon, is being sued by the family of a man who died due to alleged provider negligence. Now, court filings reveal staff improperly accessed the deceased man's protected medical records. | | |
| Esse Health, a 50 practice independent provider network, said it's still investigating the incident, which has the hallmarks of a ransomware attack. Esse Health, a 50 practice independent provider network, said it's still investigating the incident, which has the hallmarks of a ransomware attack. | | |
| The insurer said its connection to Google Analytics and Google Ads led to the sharing of personal protected information, including patient names and details on their health plans. The insurer said its connection to Google Analytics and Google Ads led to the sharing of personal protected information, including patient names and details on their health plans. | | |
| The incident, which has all the hallmarks of a ransomware attack, happened in March. Despite the scope of the breach, Yale New Haven said its EHR was not accessed and patient medical records were not taken by hackers. The incident, which has all the hallmarks of a ransomware attack, happened in March. Despite the scope of the breach, Yale New Haven said its EHR was not accessed and patient medical records were not taken by hackers. | | |
| A legacy server accessed with stolen credentials is being blamed for the incident. However, the nature and scope of the attack are still being investigated, with Oracle reportedly working with the FBI to gather details. A legacy server accessed with stolen credentials is being blamed for the incident. However, the nature and scope of the attack are still being investigated, with Oracle reportedly working with the FBI to gather details. | | |
| A hospital in California received a physical letter in the mail stating its data had been compromised, only to discover the claim was part of a nationwide "social engineering scam." A hospital in California received a physical letter in the mail stating its data had been compromised, only to discover the claim was part of a nationwide "social engineering scam." | | |
| Over a year after the breach on Change Healthcare, CareFirst BlueCross BlueShield of Maryland has filed a lawsuit saying it suffered data loss stemming from the incident. Over a year after the breach on Change Healthcare, CareFirst BlueCross BlueShield of Maryland has filed a lawsuit saying it suffered data loss stemming from the incident. | | |
| A cybersecurity researcher made the discovery. The database, in the care of a clinical trials company, was not password protected or encrypted. A cybersecurity researcher made the discovery. The database, in the care of a clinical trials company, was not password protected or encrypted. | | |
| In an SEC filing, Artivion did not provide a lot of specifics. However, the incident appears to be a ransomware attack. In an SEC filing, Artivion did not provide a lot of specifics. However, the incident appears to be a ransomware attack. | | |
| |
|
| ![]() | |
|