HHS Settles with Lehigh Valley Health Network Over Ransomware Breach
OCR imposed $800,000 penalty and corrective actions after Lehigh Valley Health Network's 2023 ransomware attack exposed PHI of 248,359 individuals.
1
Stories per day · 30 days
1 RSS
11 stories, newest first · one card per story
Stories tagged #hhs
HHS lists iRhythm breach as affecting 8.2 million people
The June 2026 incident exposed patient contact details and device account data after hackers tried to extort a ransom.
1
Senate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach
U.S. Senate unanimously passed the Health Care Cybersecurity and Resiliency Act of 2026, mandating HHS cyber standards after Change Healthcare's 190-million-person breach.
5
250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms
Clover Health and AngMar are notifying over 250,000 people after separate healthcare data breaches.
2
Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity
The US Senate passed the Health Care Cybersecurity and Resilience Act, sending it to the House.
2
HHS’ Office for Civil Rights Settles HIPAA Investigation of Ambry Genetics for Security Rule Violations
HHS Office for Civil Rights settled a HIPAA Security Rule investigation with California genetic testing firm Ambry Genetics.
280,000 Impacted by Premier Medical Group Data Breach
New York healthcare provider Premier Medical Group is notifying 282,075 patients that personal and medical information was stolen in a June breach.
1
HHS Releases Updated Security Risk Assessment Tool
HHS OCR and ONC released version 3.7 of the Security Risk Assessment Tool for healthcare organizations.
4.1 Million Impacted by AdaptHealth Data Breach
AdaptHealth disclosed a breach affecting 4,115,802 people after a socially engineered attacker stole health and insurance data from cloud-based patient systems.
1
Health data of more than 9.5 million people leaked from Aesto record system
Health data firm Aesto reported a breach affecting over 9.5 million people after hackers accessed its AWS infrastructure between December 2 and 18.
Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records
Attackers accessed part of Aesto Health's AWS infrastructure between December 2-18, 2025, exposing personal and health data of over 9.5 million patients.