Open Grok-built apps exposed patient data and plaintext passwords
Claroc says 35,578 of 37,571 live apps had no login because “Anyone with the link” was preselected.
Stories per day · 30 days
18 RSS
Relateddata-breach21ransomware12quest-diagnostics8byod6hipaa6hospital6patient-records6phi6quanum6extortion4new-mexico4data-theft3hive3nefilim3nhs3openai3patient-data3privacy3
181 stories, newest first · one card per story
Stories tagged #healthcare
Fullerton Health server breach exposed migrant workers’ data
Names, foreign ID numbers, birth dates, phones, emails and addresses were exposed; health and financial data were not.
Bacon County hospital says intruder had 17 days of access
Files were copied between July 10 and July 27, 2026, and the hospital still cannot say which information was involved.
HIPAA enforcement article did not load past Cloudflare check
The retrieved page contains only a bot-verification message, with no enforcement details.
Google Cloud launches Gemini for healthcare in preview
Partners include HCA Healthcare, Highmark Health, and Northwell Health; workflows cover records synthesis and prior authorization.
OpenAI hosts free ChatGPT workshops for caregivers in five cities
The November 10 sessions with three nonprofits cover schedules, plain-language materials, and privacy limits, not medical advice.
Buyer’s guide ranks 11 HIPAA compliance software options
The guide separates covered-entity tools from vendor-proof platforms used to show HIPAA posture beside SOC 2.
1
Amplifon says February attack stole US customer SSNs and medical data
Texas was told 85,804 people were affected and Vermont 1,027; law firms’ 1,332,826 figure is unconfirmed.
1
Epichealth cyber incident exposes patient data
Epichealth reports unauthorized access to IT systems affecting personal details, Medicare card numbers and health information; incident contained with minimal operational impact.
Weill Cornell patient data entered into AI tools without authorization
Imaging data was processed from June 10 to June 20; the notice does not state how many patients were affected.
Perry Johnson companies pay up to $10 million after 2023 breach
Settlement requires robust security policies and up to $9.7 million more penalties; 13.3 million individuals impacted including 4.2 million in New York.
1
Capacity-aware discharge policies reduce readmission learning bias
Simulations find discharge-up-to policies cut learning error 24%–25% versus threshold-on-risk policies.
Royal Cornwall Hospitals Trust Data Breach Exposed Health Details of 7,715 Staff
The Royal Cornwall Hospitals Trust admitted a data breach in February 2023 that exposed sensitive personal health information relating to 7,715 staff, which remained publicly accessible until November 2025.
1
Dark Project Ransomware Claims 38 Victims Across 8 Countries
Dark Project ransomware claims 38 victims in eight countries with double-extortion and an 80% affiliate commission.
1
Hospital gave doctor a separate PC after repeated malware
A reader says students later cited that computer in a lawsuit over the hospital’s knowledge.
UNM Health diverts ambulances and closes clinics after cyber incident
The October 26 event hit some end-user devices, spared core servers, and care was restored the next day.
2
Healthcare can’t govern the AI tools it hasn’t found yet
93% of healthcare leaders report real patient data reaching AI coding assistants during development, with seven in ten using such tools without IT awareness.
French blood storage units targeted in cyberattack
Attackers caused blood samples in French storage units to overheat to 110°C, destroying them.
1
Xsolis data breach affects nine health systems and 1.4 million patients
Xsolis reported the breach to HHS on June 5 after unauthorized access on January 20.
1
HHS Settles with Lehigh Valley Health Network Over Ransomware Breach
HHS Office for Civil Rights settled with Lehigh Valley Health Network for $800,000 and a three-year corrective action plan following a 2023 ransomware attack that exposed PHI of 248,359 individuals.
1
Hackers Hit UNM Hospital, Offer Compensation
The BYOD group attacked the University of New Mexico hospital, apologized, offered up to $2,500 per affected patient, and claimed they did not disrupt critical infrastructure.
1
HHS Settles with Lehigh Valley Health Network for Ransomware Breach
The HHS Office for Civil Rights settled with Lehigh Valley Health Network for $800,000 and a corrective action plan after a 2023 ransomware attack that affected 248,359 individuals.
1
UNM Health addresses cyberattack after ransomware group claims responsibility
UNM says operations are normal while the FBI investigates whether patient data was stolen; the group is unnamed.
1
University of New Mexico restores hospital systems after ransomware attack
HSC says it paid no ransom; the BYOD gang claims it will keep data unless individuals pay $2,500.
1