The Michigan Department of Community Health has notified more than 49,000 individuals that a server of the Michigan Cancer Consortium containing their names, birth dates, Social Security numbers, cancer screening test results and testing dates was hacked.

As part of its efforts to develop a voluntary framework to improve cybersecurity in the nation's critical infrastructure, the National Institute of Standards and Technology has posted a draft outline of the document to invite public review and gather comments.

The Indiana Family and Social Services Administration is in the process of notifying almost 200,000 clients that some of their personal information may have been accidently disclosed to other clients, according to a statement from the organization.

About 9,000 patients were impacted when an unauthorized individual or company accessed and copied all or parts of the EHR system at Sight and Sun Eyeworks Gulf Breeze in Gulf Breeze, Fla.

A stolen laptop was the cause of a breach affecting 12,900 patients at Lucile Packard Children’s Hospital at Stanford University in Palo Alto, Calif.

In a safety communication, the FDA is recommending that medical device manufacturers and healthcare facilities "take steps to assure that appropriate safeguards are in place to reduce the risk of failure due to cyberattack, which could be initiated by the introduction of malware into the medical equipment or unauthorized access to configuration settings in medical devices and hospital networks."

A Florida hospital experienced a data breach courtesy of an employee whose job was to help patients with mental health problems find jobs within the hospital system. Instead, he stole their identities.

An unrelated drug-related investigation led to the discovery of a list of stolen patient data.