A U.S. military contractor has agreed to an $11.2 million settlement with the U.S. Department of Justice to resolve allegations it lied about properly securing sensitive patient data tied to the Tricare program.

A cybersecurity researcher made the discovery. The database, in the care of a clinical trials company, was not password protected or encrypted. 

The cyberattack on University of Missouri Health Care’s systems happened in 2020 and affected 190,000 patients.

The last count submitted to HHS in October pegged the number at 100 million. Now that figure sits at 190 million, and the company continues its investigation. 

The agency said Contec and Epsimed monitors connected via WiFi are particularly susceptible to cyberattack and could be used to gain access to hospital systems. 

Phishing incidents were the most common type of attack on a healthcare entity, which is consistent with what's seen across all industries. 

A regional chain of clinics that lied through its teeth about a data breach has agreed to pay a $350,000 settlement to resolve multiple allegations it violated HIPAA. 

Rostislav Panev is facing fraud and cybercrime charges in Israel, where he has been accused of being a software developer for hacker group LockBit.

State Attorney General Mike Hilgers said he decided to sue because of Change Healthcare's evident carelessness as well as its slowness to inform potential victims.

The Center for Vein Restoration has notified patients about a data breach that occurred in October, exposing financial and medical information on patients from across the U.S.