34 casos · pág. 1/2
HHS confirmed in the Federal Register in October 2026 that it will not apply an inflation multiplier to HIPAA civil monetary penalties in 2026, so the 2025 penalty structure stays in force until the next adjustment, expected in early 2027 (hipaajournal.com). The cause is the fall 2025 government shutdown, which stopped the Bureau of Labor…
State attorneys general share HIPAA enforcement with the HHS Office for Civil Rights (OCR) under authority granted by the HITECH Act. The first action came in 2010, when the Connecticut AG settled with Health Net for $250,000. Enforcement peaked in 2023 with 16 actions, including a $49.5 million penalty against Blackbaud over a 5.5 millio…
Brazilian outlet Olhar Digital describes a quishing fraud pattern in which criminals create or tamper with payment QR Codes so that victims' money goes to accounts the fraudsters control. The scheme appears in online shopping, in physical venues such as bars, restaurants, street markets and car parks, and in printed boletos. The Federação…
A survey of 2,018 senior IT decision-makers in the US and UK, conducted by Censuswide for Origina and published with Thinkers50 in the report The Software Tax, finds large enterprises spend an average of 28% of software budgets on upgrades, migrations and licensing changes they would not have chosen. 95% of respondents paid for a vendor-d…
Trend Micro published its Holidays, Scams, and AI survey of 6,536 consumers across the United States, United Kingdom, Australia, New Zealand, Singapore and Taiwan (2,100 in the U.S.), conducted 31 October to 10 November 2025. It shows a gap between scam-spotting confidence and actual exposure: 56% of Americans are very or extremely confid…
Trend Micro released its 2026 Consumer Security Predictions Report on December 3, 2025. It warns that scams will reach unprecedented scale as fraudsters combine automation, AI-generated personas, voice cloning and deepfake media with emotional manipulation. The report expects multi-channel scam journeys to become the dominant pattern in 2…
AI voice-cloning scams are now cheap and convincing, and a Hiya report from March says one in four Americans received a deepfake voice call in the past 12 months. A further 24% say they cannot tell a cloned voice from a real one. The article describes virtual kidnapping scams, in which attackers clone a relative's voice from a few seconds…
Consumer-fraud reporting describes a growing ecosystem of timeshare exit scams that target owners wanting to leave their contracts. Scammers find owners through real estate records and approach them with unsolicited calls or high-pressure dinner seminars. They then collect large upfront fees, often thousands of dollars, for services they …
In his Weekly Update 517, Troy Hunt offers commentary on the current ransomware situation. He argues that much of what is called ransomware often involves no malware at all and is simply extortion, frequently carried out by young offenders. These actors earn large sums but struggle to spend them without being caught. He adds that breached…
The Center for AI Safety (CAIS) maintains a Wage Loss Dashboard that estimates the economic cost of US job cuts companies attribute to AI. It was updated this month with September data. It shows just over 117,000 AI-attributed job cuts nationally since January 2026, equal to about $8.5 billion in estimated annual wage losses. This is indu…
Bank of America hired 1,000 extra contractors in Q2 to patch the volume of vulnerabilities surfaced by Anthropic's Mythos AI model, CEO Brian Moynihan said on the Q3 earnings call. The contractors supplement about 3,000 existing technical staff and are still on site. Moynihan put remediation costs at "a couple of hundred million plus", a …
American Renal Management LLC, doing business as Innovative Renal Care, a kidney care provider with more than 200 locations in 28 U.S. states, has proposed a $900,000 settlement to resolve consolidated class action litigation (In re American Renal Management LLC Data Breach Litigation, U.S. District Court for the Middle District of Tennes…
The HIPAA Journal has updated its compilation of HHS OCR breach portal data (October 2009 to August 2026, data pulled October 10, 2026). It shows a record 772 large healthcare breaches (500+ individuals) in 2025, after a sharp rise between 2018 and 2021 driven by ransomware. From January to April 2026, 252 large breaches were reported, 9.…
Jefferson County Health Department (Hillsboro, Missouri) has agreed to a $2.25 million settlement of a consolidated class action over a 2022 data security incident. An unauthorized third party accessed its network between October 31 and November 15, 2022, and may have viewed or obtained personal and protected health information. The breac…
The US Federal Trade Commission (FTC) opened a rulemaking in September asking whether platforms should be required to stop impersonation scam ads from reaching consumers, citing ad tools that generate copy, images and video and optimize targeting regardless of whether an ad is legitimate. The article reports that nearly one trillion scam …
A $6,438,578.20 settlement has been agreed to resolve the "Other Labs Track" of consolidated litigation over the American Medical Collection Agency (AMCA) breach. The defendants are AMCA clients Sonic Healthcare U.S.A., Aurora Diagnostics LLC, Clinical Pathology Laboratories, Inc. and Austin Pathology Associates. AMCA, a subsidiary of Ret…
California has settled with 23andMe for $6 million over the 2023 credential-stuffing breach. The breach exposed personal and genetic data of about 6.9 million people, including 855,000 California residents. The settlement follows a July 2026 $18 million settlement with a coalition of 42 state attorneys general, which California did not jo…
Infoblox introduces Agentic Denial of Service (ADoS), a class of disruption in which AI agents overwhelm systems with excessive requests, actions or computations, or in which an adversary turns a defender's own automation against it. It is not "DDoS with AI": it denies the business effective use of its AI agents, the infrastructure they d…
Huntress explains the compliance obligations of Texas law HB 3834, passed in June 2019. It requires state agency and local government employees, and state contractors, to complete a Department of Information Resources (DIR)-certified cybersecurity awareness training every year. Since September 1, 2025, HB 3512 adds a second annual require…
Huntress announced general availability of the Managed ITDR Lookback feature. It reviews up to 180 days of Microsoft 365 login history for newly onboarded tenants, looking for compromises that predate monitoring. Active compromises trigger a critical Incident Report, SOC investigation and session revocation. Previously remediated ones are…
