Many hospitals that use Epic were unable to access services, forcing them to operate on pen-and-paper and cancel non-emergency care delivery. The disruption was caused by an error with security vendor CrowdStrike.

Medicare rescinded the provision in the 2024 Medicare Physician Fee Schedule, but the law remains on the books. 

The Healthcare Cybersecurity Act would improve cooperation between HHS and CISA to ideally speed up the response to cyberattacks.

Several state attorneys general have issued notices to residents regarding the Change Healthcare breach, asking them to sign up for credit monitoring and identity theft protection.

A HIPAA notification posted to the company’s website said details about patients’ diagnoses and treatments may have been stolen by hackers.

Hospitals and provider groups have responded with confusion to a rule proposed by the Cybersecurity and Infrastructure Security Agency requiring hospitals and providers to comply with stringent reporting requirements that overlap with HIPAA.

A former employee at Nuance Communications, a Microsoft subsidiary, stands accused of taking patient data from Geisinger Health system shortly after their termination.

Providers argued the HHS overstepped its regulatory authority. A federal court in Texas agreed.