The 2024 ransomware attack on Ascension Health impacted operations in 12 states and led to protected health information being taken by hackers. A class action of plaintiffs is seeking damages.

Healthcare Interactive confirmed the cyberattack in a statement released last week; however the details have yet to be reported to HHS. The incident happened in July. 

Ohio Medical Alliance, which operates in six states to help individuals obtain medical marijuana cards, is facing a class action lawsuit after a cybersecurity researcher discovered a 323 GB trove of patient data online.

The nonprofit health system had allegedly deployed Meta Pixel, a common advertising tool, on its patient portal. This likely exposed sensitive health information to third parties. However, the hospital denies wrongdoing. 

The data comes from a new report by cybersecurity firm Netwrix, which found that healthcare continues to outpace other sectors in both number of breaches and associated financial losses.

Kettering Health said the Internet outage at its facilities was not caused by a cyberattack. The exact cause was not revealed.

Aspire Rural Health System, a three-hospital system in Michigan, said it was unaware that its network had been compromised. An investigation revealed that hackers gained access to protected health information, including patient charts. 

A former executive at Verily is suing the company, alleging he was fired after reporting the incidents to management. The misuses of data, if true, would constitute HIPAA violations.

Adena Health System was accused in a class-action lawsuit of deploying Meta Pixel tracking tools on its patient portal. As many as 89,000 patients could have had protected health information shared with advertisers. 

The initial incident happened in April. Since that time, the notorious cybercrime cell Interlock has claimed responsibility. A data dump from the breach was put up for sale on the dark web.