A hospital in California received a physical letter in the mail stating its data had been compromised, only to discover the claim was part of a nationwide "social engineering scam." 

Over a year after the breach on Change Healthcare, CareFirst BlueCross BlueShield of Maryland has filed a lawsuit saying it suffered data loss stemming from the incident. 

That number could rise to $6.75 million, depending on the number of patients who sign onto the class-action settlement levied against Virginia Mason Medical Center. The hospital does not admit to wrongdoing. 

A cybersecurity researcher made the discovery. The database, in the care of a clinical trials company, was not password protected or encrypted. 

A U.S. military contractor has agreed to an $11.2 million settlement with the U.S. Department of Justice to resolve allegations it lied about properly securing sensitive patient data tied to the Tricare program.

The agency said Contec and Epsimed monitors connected via WiFi are particularly susceptible to cyberattack and could be used to gain access to hospital systems. 

The cyberattack on University of Missouri Health Care’s systems happened in 2020 and affected 190,000 patients.

A regional chain of clinics that lied through its teeth about a data breach has agreed to pay a $350,000 settlement to resolve multiple allegations it violated HIPAA. 

Phishing incidents were the most common type of attack on a healthcare entity, which is consistent with what's seen across all industries.