9 casos · pág. 1/1
A Semperis survey, covered by HIPAA Journal, finds ransomware groups increasingly threatening victims' employees and their families as the share of victims paying ransoms falls from 78% in 2024 to 69% in 2025 and 59% in 2026. Of the attacks surveyed, 37% involved threats against friends or family of staff, and 41% of respondents said they…
California has settled with 23andMe for $6 million over the 2023 credential-stuffing breach. The breach exposed personal and genetic data of about 6.9 million people, including 855,000 California residents. The settlement follows a July 2026 $18 million settlement with a coalition of 42 state attorneys general, which California did not jo…
A joint StopRansomware advisory (AA26-293A) from CISA, the FBI, the USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026 (cisa.gov). The group has been active since August 2024 and has compromised …
Central Ohio Primary Care Physicians, a large physician-owned primary care group based in Westerville, Ohio, with more than 80 locations, disclosed a breach affecting about 1.4 million current and former patients. In August 2026, an unauthorized third party used a voice phishing (vishing) attack to obtain credentials that gave access to i…
A $6,438,578.20 settlement has been agreed to resolve the "Other Labs Track" of consolidated litigation over the American Medical Collection Agency (AMCA) breach. The defendants are AMCA clients Sonic Healthcare U.S.A., Aurora Diagnostics LLC, Clinical Pathology Laboratories, Inc. and Austin Pathology Associates. AMCA, a subsidiary of Ret…
Mid Florida Dermatology & Plastic Surgery, a 33-location medical group in central Florida, reported to the HHS Office for Civil Rights a breach affecting 85,585 individuals. An unauthorized third party accessed its network from March 26 to March 30, 2026, and patient files may have been viewed or acquired. Two other healthcare incidents w…
Boston Children's Health Physicians (BCHP) and its managed IT provider XTIUM (formerly Axispoint Technology Solutions Group) settled with the New York and Connecticut Attorneys General over an August 2024 breach affecting almost 890,000 individuals. The settlement carries a $4 million penalty, of which $2.7 million is payable (New York $2…
iRhythm Technologies, maker of the Zio wearable ECG monitor, has had a June 2026 data breach confirmed at roughly 8.18 million individuals, according to the Oregon Attorney General breach list. This is close to its entire customer base of about 8 million patients in the US and Europe. The company first identified unauthorized access on Ju…
An $80 million settlement has been proposed to resolve the consolidated class action In Re Conduent Business Services Data Breach Litigation, pending in the U.S. District Court for the District of New Jersey. The suit stems from the 2024 breach at Conduent Business Services, LLC, in which an unauthorized party had network access from Octo…
