19 casos · pág. 1/1
Quest Diagnostics, a Fortune 500 diagnostic testing company based in Secaucus, New Jersey, told the SEC in a Form 8-K filed on October 22, 2026 that it detected unauthorized access to its Quantum Lab Services Manager (LSM) system on October 21, 2026. The company suspects patient records were compromised, but the scale of the breach has no…
Manhattan law firm Tarter Krinsky & Drogin reported a breach affecting the protected health information of 196,645 patients of its healthcare clients, along with attorney-client privileged data. An unauthorized third party intermittently accessed some of its servers between July 9 and September 9, 2025, and the activity was detected on Se…
Ridgeway Pharmacy Ltd, a Victor, Montana mail order and community pharmacy, disclosed that a security incident involving its third-party designed and developed website exposed the personal and health information of 258,920 customers. The company became aware of the exposure on August 21, 2026. Forensic experts confirmed the incident was l…
Mid Florida Dermatology & Plastic Surgery, a 33-location medical group in central Florida, reported to the HHS Office for Civil Rights a breach affecting 85,585 individuals. An unauthorized third party accessed its network from March 26 to March 30, 2026, and patient files may have been viewed or acquired. Two other healthcare incidents w…
Central Ohio Primary Care Physicians, a large physician-owned primary care group based in Westerville, Ohio, with more than 80 locations, disclosed a breach affecting about 1.4 million current and former patients. In August 2026, an unauthorized third party used a voice phishing (vishing) attack to obtain credentials that gave access to i…
Washington Gastroenterology has agreed to a $4,600,000 settlement of consolidated class action litigation (In re Washington Gastroenterology, PLLC Data Breach Litigation) over a breach of its network. Attackers accessed the network on October 23, 2024, and the incident was identified on January 28, 2025. The personal and protected health …
Four US healthcare organizations disclosed cyber incidents. UltraMobile Imaging (Rochester, New York) confirmed that the protected health information of 75,000 individuals was exposed after a network disruption on July 30, 2026. Artistic Smiles (operated by Lift Dental PLLC, Colorado) reported a breach affecting 3,735 people, and the Nigh…
American Renal Management LLC, doing business as Innovative Renal Care, a kidney care provider with more than 200 locations in 28 U.S. states, has proposed a $900,000 settlement to resolve consolidated class action litigation (In re American Renal Management LLC Data Breach Litigation, U.S. District Court for the Middle District of Tennes…
The HIPAA Journal has updated its compilation of HHS OCR breach portal data (October 2009 to August 2026, data pulled October 10, 2026). It shows a record 772 large healthcare breaches (500+ individuals) in 2025, after a sharp rise between 2018 and 2021 driven by ransomware. From January to April 2026, 252 large breaches were reported, 9.…
The Massachusetts Attorney General settled alleged HIPAA and Massachusetts Data Security Law violations with former medical transportation provider Transformative Healthcare, LLC and its subsidiaries Lifeline and Fallon. The settlement also resolves MassHealth upcoding allegations, and the combined allegations carry a $1,000,000 penalty p…
Jefferson County Health Department (Hillsboro, Missouri) has agreed to a $2.25 million settlement of a consolidated class action over a 2022 data security incident. An unauthorized third party accessed its network between October 31 and November 15, 2022, and may have viewed or obtained personal and protected health information. The breac…
In July 2026, 77 large healthcare data breaches (500+ individuals) were reported to the HHS Office for Civil Rights (OCR), a 10% month-over-month increase and the third consecutive monthly rise. At least 33,485,970 individuals were affected, up 642% from June and 154% above the 12-month average. January-July 2026 totals 67.4 million affec…
A $6,438,578.20 settlement has been agreed to resolve the "Other Labs Track" of consolidated litigation over the American Medical Collection Agency (AMCA) breach. The defendants are AMCA clients Sonic Healthcare U.S.A., Aurora Diagnostics LLC, Clinical Pathology Laboratories, Inc. and Austin Pathology Associates. AMCA, a subsidiary of Ret…
Boston Children's Health Physicians (BCHP) and its managed IT provider XTIUM (formerly Axispoint Technology Solutions Group) settled with the New York and Connecticut Attorneys General over an August 2024 breach affecting almost 890,000 individuals. The settlement carries a $4 million penalty, of which $2.7 million is payable (New York $2…
iRhythm Technologies, maker of the Zio wearable ECG monitor, has had a June 2026 data breach confirmed at roughly 8.18 million individuals, according to the Oregon Attorney General breach list. This is close to its entire customer base of about 8 million patients in the US and Europe. The company first identified unauthorized access on Ju…
Conduent has agreed to an $80 million settlement of the consolidated class action In Re Conduent Business Services Data Breach Litigation, filed in the U.S. District Court for the District of New Jersey on October 16, 2026 and confirmed in an 8-K filing with the SEC (infosecurity-magazine.com). The suit stems from the 2024 breach at Condu…
California has settled with 23andMe for $6 million over the 2023 credential-stuffing breach. The breach exposed personal and genetic data of about 6.9 million people, including 855,000 California residents. The settlement follows a July 2026 $18 million settlement with a coalition of 42 state attorneys general, which California did not jo…
A Semperis survey, covered by HIPAA Journal, finds ransomware groups increasingly threatening victims' employees and their families as the share of victims paying ransoms falls from 78% in 2024 to 69% in 2025 and 59% in 2026. Of the attacks surveyed, 37% involved threats against friends or family of staff, and 41% of respondents said they…
The 2026 Ponemon Healthcare Cybersecurity Report, commissioned by Proofpoint, finds that cyberattacks on healthcare organizations are rising, costing more and increasingly harming patient care. The survey covered 705 IT and security practitioners. 97% of organizations suffered at least one attack in the past 12 months, averaging 51 attack…
