/
data_types_exposed:health_data × limpar

Resultados

10 casos · pág. 1/1

hipaajournal.com · high

Central Ohio Primary Care Physicians breach exposes 1.4 million patients' data after vishing attack; Chaos ransomware listing

Central Ohio Primary Care Physicians, a large physician-owned primary care group based in Westerville, Ohio, with more than 80 locations, disclosed a breach affecting about 1.4 million current and former patients. In August 2026, an unauthorized third party used a voice phishing (vishing) attack to obtain credentials that gave access to i…

infosecurity-magazine.com · medium

Conduent agrees to $80m settlement over 2024 SafePay-linked breach exposing data of about 62 million people

Conduent has agreed to pay $80m to settle a class action over the October 2024 cyber incident that exposed personal and health data of roughly 62 million people. The filing was submitted to the US District Court for the District of New Jersey on October 16, 2026, and confirmed in an 8-K filing with the SEC. The attack was allegedly carrie…

welivesecurity.com · medium

Medicare Open Enrollment season (Oct 15 - Dec 7) drives scams harvesting health, insurance and financial data

Scammers are exploiting the annual Medicare Open Enrollment period (October 15 to December 7) as a pretext to impersonate insurers, agencies or Medicare itself. Contact comes by phone, SMS, email, social media and malicious Google ads that lead to spoofed, official-looking websites. Lures include plan changes, card replacement, lower prem…

hipaajournal.com · medium

Mid Florida Dermatology & Plastic Surgery breach hits 85K; Kannarr Eye Care and IU Health vendor AME Group also report incidents

Mid Florida Dermatology & Plastic Surgery, a 33-location medical group in central Florida, reported to the HHS Office for Civil Rights a breach affecting 85,585 individuals. An unauthorized third party accessed its network from March 26 to March 30, 2026, and patient files may have been viewed or acquired. Two other healthcare incidents w…

hipaajournal.com · medium

Boston Children's Health Physicians and XTIUM settle with NY and CT AGs over 2024 MSP breach exposing ~890,000 patients

Boston Children's Health Physicians (BCHP) and its managed IT provider XTIUM (formerly Axispoint Technology Solutions Group) settled with the New York and Connecticut Attorneys General over an August 2024 breach affecting almost 890,000 individuals. The settlement carries a $4 million penalty, of which $2.7 million is payable (New York $2…

hipaajournal.com · critical

iRhythm Technologies breach exposes data of 8.2 million patients after social-engineering attack on third-party platform

iRhythm Technologies, maker of the Zio wearable ECG monitor, has had a June 2026 data breach confirmed at roughly 8.18 million individuals, according to the Oregon Attorney General breach list. This is close to its entire customer base of about 8 million patients in the US and Europe. The company first identified unauthorized access on Ju…

hipaajournal.com · medium

Conduent proposes $80M settlement over 2024 SafePay ransomware breach affecting 62.2 million individuals

An $80 million settlement has been proposed to resolve the consolidated class action In Re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey. The suit stems from the 2024 breach at Conduent Business Services, LLC, in which an unauthorized party had network access from Octo…

securityweek.com · high

Paradigm Healthcare Services breach exposes data of 970,000 Medi-Cal members; TKD and Ridgeway Pharmacy also report breaches

Paradigm Healthcare Services, a San Francisco-based billing processor for Medi-Cal (California's Medicaid program) under a data use agreement with the California DHCS, told the US HHS that a breach affected more than 970,000 people. The company detected unauthorized access to its local network on October 13, 2025. It determined only on Au…

welivesecurity.com · low

US breach notices increasingly omit attack details; ITRC data shows only 24% disclose the attack vector in H1 2026

Publicly reported data breaches in the US reached an all-time high last year, with over 3,300 incidents and nearly 280 million victim notices. The Identity Theft Resource Center (ITRC) reports that over 471 million notices went out in the first half of 2026, but only 24% described the attack vector, the lowest rate it has recorded. The ar…