Ohio Medical Alliance, which operates in six states to help individuals obtain medical marijuana cards, is facing a class action lawsuit after a cybersecurity researcher discovered a 323 GB trove of patient data online.

The nonprofit health system had allegedly deployed Meta Pixel, a common advertising tool, on its patient portal. This likely exposed sensitive health information to third parties. However, the hospital denies wrongdoing. 

Healthcare Interactive confirmed the cyberattack in a statement released last week; however the details have yet to be reported to HHS. The incident happened in July. 

Health IT company Episource confirmed a ransomware attack of its network exposed data from payer and provider customers alike, with details such as medical diagnoses and treatments possibly stolen by nefarious actors. 

In a new report, Proofpoint and the Ponemon Institute surveyed 677 health IT professionals to understand the impact cybersecurity incidents have on patient care. 

The 2024 ransomware attack on Ascension Health impacted operations in 12 states and led to protected health information being taken by hackers. A class action of plaintiffs is seeking damages.

Kettering Health said the Internet outage at its facilities was not caused by a cyberattack. The exact cause was not revealed.

The data comes from a new report by cybersecurity firm Netwrix, which found that healthcare continues to outpace other sectors in both number of breaches and associated financial losses.

Adena Health System was accused in a class-action lawsuit of deploying Meta Pixel tracking tools on its patient portal. As many as 89,000 patients could have had protected health information shared with advertisers. 

A former executive at Verily is suing the company, alleging he was fired after reporting the incidents to management. The misuses of data, if true, would constitute HIPAA violations.