The publicly traded EHR and cloud healthcare IT infrastructure company confirmed in a filing with the U.S. Securities and Exchange Commission that hackers were able to breach its network in March for roughly eight hours, gaining partial access to patient record stores. The incident is being investigated.

In a Final Rule revealed last week, the Centers for Medicare & Medicaid Services outlined its plan to exchange medical records, diagnostic images and clinical notes electronically using secure protocols. Once the rule is published in the Federal Register, any HIPAA-covered entity that interacts with Medicare will have two years to follow CMS into the modern age.

Brockton Hospital, part of Signature Healthcare, was hit by a “cybersecurity incident” on Monday that forced ambulances to divert patients to other emergency rooms. As the hospital worked to get systems back online, the ransomware gang Anubis claimed responsibility for the breach, then removed their post.

In a statement, Nacogdoches Memorial Hospital said the incident occurred on Jan. 31. Stolen information included names, medical record numbers, Social Security numbers and more. No cybercrime gang has claimed credit for the data breach.

Stryker, a Michigan-based company that manufactures surgical implants, confirmed it was experiencing a global network outage. Employee devices reportedly displayed the logo of a pro-Iran cybercrime cell.

In a lawsuit seeking class action status, a woman identified as “P.M.” said she began using the website for Kisqali, a Novartis breast cancer treatment, in late 2024 shortly after being issued a prescription. Unbeknownst to her, sensitive data she shared when seeking a discount may have been shared with advertisers.

Authorities said Shane Daley, 40, began making threatening calls mere hours after Brian Thompson was shot and killed outside a hotel in Manhattan. Daley awaits sentencing and faces up to five years in prison.

Emanuel Medical Center, a nonprofit healthcare facility run by the county, confirmed last week that it suffered a data breach in May 2025. It said protected health information was accessed in the cyberattack, and it’s begun sending notices to victims. 

Family West Health, a 25-bed facility, said it spotted a cyberattack this week that forced it to shut down IT systems. However, it confirmed patient care was not impacted.

A “cybersecurity incident” at Heywood Healthcare forced it to halt all emergency services at one of its hospitals. Details on what happened remain largely unclear.