Pharmaceutical giant Amgen disclosed a data breach in which attackers stole patient health information and proprietary corporate data from cloud systems operated by third-party service providers.
In June 2021, DataBreaches reported on a ransomware attack affecting OSF Healthcare by a little-known gang called Xing Team. Our reporting noted OSF's lack or response to inquiries and lack of timely notification. When OSF issued a statement in October, DataBreaches reported on that, too, commenting that we did not find their incident response timely... Source
In June 2021, DataBreaches reported on a ransomware attack affecting OSF Healthcare by a little-known gang called Xing Team, who added OSF to their leak site on May 18 and then leaked all the data on June 3. Our reporting noted OSF's lack of response to inquiries sent to it in May. When OSF issued... Source
Health-ISAC is warning healthcare and medical technology organizations of an observed increase in successful attacks by ShinyHunters, which are using social engineering to compromise single sign-on accounts and steal data from cloud services. [...]
Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people. [...]
Comprehensive draft-vs-final redline analysis, sector-specific readiness assessments, and a comment-letter database covering every public submission. Free for any practice that needs it.
A 24-month read of OCR filings across 1,847 dental, optometry, and chiropractic incidents reveals a single shared failure mode — and three controls that consistently break the chain.
A field study with anonymized network traffic across 40 practices. The median count surprised even the practices themselves — and only 9 of those 27 had current BAAs.
Dark-web research finds extortion actors are analyzing breached records into searchable, segmented assets before release, raising the stakes for any organization holding sensitive patient data.
Dark-web researchers document a shift in extortion tactics where threat actors analyze and categorize stolen records into searchable, targetable assets before any public release or sale.
Dark-web research finds extortion actors are structuring stolen records into searchable, tiered assets, raising the downstream exposure risk for breached healthcare organizations.
Dark-web researchers document a shift in extortion tactics where threat actors analyze and segment stolen records into searchable, targetable assets rather than releasing raw bulk dumps.
HIPAA Pulse is a publication from Patient Protect, the HIPAA compliance platform built for independent healthcare practices. We cover breaches, OCR enforcement, regulatory developments, and tactical guidance for the people who actually have to comply with the rule. The breach data, regulatory tracking, and pattern analysis are useful regardless of what software you use.