According to lawyers representing two of the plaintiffs, a shared EHR portal was used by a physical therapist at KU Health to access the sensitive photographs in what is being investigated as a data breach. 

Questions remain about the alleged breach on a legacy server at Oracle Health, as the nature of the attacks and scope of stolen data are still being investigated. 

Esse Health, a 50 practice independent provider network, said it's still investigating the incident, which has the hallmarks of a ransomware attack. 

One Medical, a chain of primary care clinics owned by Amazon, is being sued by the family of a man who died due to alleged provider negligence. Now, court filings reveal staff improperly accessed the deceased man's protected medical records.

The academic medical center is accused of deploying lax security protocols that allowed an employee to access internet-connected cameras and private emails in acts of privacy invasion that lasted a decade. 

Over a year after the breach on Change Healthcare, CareFirst BlueCross BlueShield of Maryland has filed a lawsuit saying it suffered data loss stemming from the incident. 

The agency said Contec and Epsimed monitors connected via WiFi are particularly susceptible to cyberattack and could be used to gain access to hospital systems. 

UnitedHealth Group said it is seeking repayment of “interest-free” advances distributed to providers struggling during the shutdown of claims processing caused by the ransomware attack on Change Healthcare. 

According to a report from cybersecurity firm Veriti, more than 10,000 attempted cyberattacks were conducted in a single week, with financial institutions, healthcare and government agencies the prime targets. 

A hospital in California received a physical letter in the mail stating its data had been compromised, only to discover the claim was part of a nationwide "social engineering scam."