Tag: healthcare
423 articles
FTC Reverses Health App Breach Notification Policy
The Federal Trade Commission has reversed its policy on breach notification for health apps, deeming the previous guidance unnecessary and superseded by ongoing rulemaking. This move aligns with the White House's push for a deregulatory approach, aiming to reduce unnecessary guidance.
Veradigm Breach Exposes Patient Data After Third-Party Hack
Veradigm is alerting patients to a data breach caused by a third-party hack, which exposed sensitive patient information after a malicious actor stole credentials and accessed API environments. The breach, linked to a busy ransomware operation, has not disrupted Veradigm's operations.
Veradigm Breach Exposes Patient Data After Ransomware Attack
A recent ransomware attack on one of Veradigm's third-party vendors has led to a data breach, exposing sensitive patient information - but fortunately, the incident was contained and didn't disrupt the company's operations. Veradigm has already launched a response and notified law enforcement.
Data Breaches Expose Vulnerable Supply Chains
Recent data breaches at the Pokémon Center, McKesson, and other major players in freight, retail, airports, finance, and healthcare reveal a disturbing trend: third-party vulnerabilities and social engineering are leaving supply chains exposed. A staggering 284 million records were allegedly stolen, highlighting the urgent need for stronger security measures.
Boston Scientific Revises Outlook as Cyberattack Disrupts Operations
Boston Scientific's operations have been significantly disrupted by a cyberattack, forcing the company to revise its financial outlook and warning investors of a potential material impact on its third-quarter and full-year results. The incident, detected on August 25, has left the company's net sales growth and earnings guidance in jeopardy.
Threat Actors Exploit AI for Large-Scale Credential Harvesting
Threat actors are supercharging their attacks with AI, using it to scale up credential harvesting and launch more sophisticated campaigns. Google Threat Intelligence Group reports that financially motivated and espionage-focused attackers are increasingly turning to AI to target high-value sectors like healthcare, government, and media.
Google Warns of AI Data Extortion Surge
Google's top analyst warns that AI data has become a prime target for extortionists, with companies willing to pay up to keep their valuable intellectual property under wraps. Attackers are exploiting this vulnerability, as seen in recent breaches at a healthcare firm and an AI media generation company.
Pentagon Scrambles to Offset Mounting FY26 Operational Costs
Rep. Rosa DeLauro slammed the Pentagon for a secretive attempt to divert NIH funds meant for lifesaving medical research, sparking a heated debate over the true intentions behind the proposed interagency agreement. The disputed deal would have transferred NIH dollars to the Defense Department, but ultimately no funds were transferred.
French Hospital Breach Fines €500,000 for GDPR Failures
France's data protection authority slapped Hôpital privé de la Loire with a hefty €500,000 fine after a summer 2025 security breach exposed sensitive records of over 727,000 people, revealing major GDPR failures. The fine was issued for breaching obligations under the General Data Protection Regulation, specifically Articles 32 and 34.
Tech Giants Unveil Advanced Cyber AI Models With Enhanced Safeguards
Google's Fairwind Program gives high-priority defenders, such as governments and healthcare providers, a critical edge in cybersecurity with early access to cutting-edge AI models that help them stay ahead of emerging threats. This proactive approach enables them to build stronger defenses and protect against new risks before they arise.
Nutex Health Breach Exposes Patient Data to Ransomware Gang
Nutex Health revealed a devastating data breach on August 31, confirming that a ransomware gang had infiltrated its servers, compromising sensitive patient, employee, and business information. The attackers have even threatened to publicly expose the stolen data.
Aesto Health Data Breach Exposes 9.5 Million Patients
Aesto Health revealed a massive data breach on June 24, affecting a staggering 9.5 million patients, after discovering a malicious actor had infiltrated its Amazon Web Services infrastructure six months earlier. The breach, which occurred between December 2-18, 2025, exposed sensitive information, sparking a lengthy internal investigation.
McKesson Breach Exposes Third-Party Risks in Healthcare
A single vulnerable third-party application can spark a national patient data crisis, as seen in the recent McKesson breach, where a third-party integration led to a massive data exfiltration claim of 284 million records.
Novocure Breach Exposes Over 1,400 US Cancer Patient Records
Rest assured, Novocure confirms that the breach didn't compromise their medical treatment devices or disrupt operations, and all systems are fully functional. The company is taking swift action, having discovered the unauthorized access in mid-August and immediately launching an investigation to contain the incident.
McKesson Probes Data Breach After ShinyHunters Claims 284 Million Records Stolen
McKesson is investigating a data breach after a hacking group claimed to have stolen 284 million records, prompting the healthcare giant to probe unauthorized access to its third-party applications. The breach appears to be limited to a subset of customers within two of its business units.
McKesson Discloses Data Theft After ShinyHunters Extortion Attack
McKesson has confirmed a data theft incident following a cyberattack by ShinyHunters, but has assured customers that its business and distribution centers are up and running with no ongoing unauthorized activity. The company sprang into action, activating incident response protocols and launching an investigation to minimize disruption.
Cyberattacks Disrupt Healthcare Firms, Compromise Patient Data
Millions of patient records are at risk and remote monitoring for newly implanted cardiac devices has been crippled after two major healthcare firms, Boston Scientific and McKesson, fell victim to separate cyberattacks. Boston Scientific's hack has left new pacemakers and heart devices unable to transmit vital data remotely, putting patients' health and privacy in immediate jeopardy.
North Korea Expands Job Fraud Into New Sectors
North Korean workers are pulling off a clever scam, tricking companies into hiring them remotely and often doing legitimate work, all while hiding their true identities. Huntress has uncovered alarming cases of this employment fraud expanding into healthcare, sales, marketing, and medical fields.
McKesson Breach Exposes 284 Million Patient Data Records
A massive data breach at McKesson has exposed a staggering 284 million patient data records, sparking concerns about the security of sensitive medical information. The incident, discovered on August 25, 2026, is still under investigation, with the company working to determine the impact on its operations and patients.
Boston Scientific Disrupts Global Operations After Cyber Incident
Boston Scientific's global operations have been significantly disrupted due to a cyber incident, affecting access to key systems and applications, including order processing and shipping. The incident has caused a major network outage, impacting the company's ability to operate normally worldwide.
Boston Scientific Cyberattack Disrupts Global Operations
A delayed shipment of a life-saving cardiac device can have devastating consequences, like a cancelled surgery - and that's exactly what's at risk when a cyberattack hits a medical device manufacturer like Boston Scientific. The recent attack has disrupted the company's global operations, causing order-processing delays that can have a ripple effect on patients' lives.
Boston Scientific Hit by Global Cyberattack Disruption
Boston Scientific is facing significant disruptions to its operations after a global cyberattack hit its IT systems, limiting access to crucial business applications and hindering its ability to process and ship customer orders. The company is working closely with third-party experts to investigate and restore its systems, but a timeline for full recovery remains uncertain.
Boston Scientific Hit by Cyberattack Disrupting Global Operations
Boston Scientific's global operations have been disrupted by a cyberattack, causing significant hiccups in processing and shipping customer orders due to limited access to key information systems and business applications. The incident was detected on August 25, prompting an immediate response to mitigate the impact.
Nutex Health Probes Data Breach After Servers Exfiltrated
Nutex Health is investigating a data breach that may have compromised private and confidential information stored on its servers, which were accessed and exfiltrated by an unauthorized third party. The incident has prompted a thorough probe and disclosure to the U.S. Securities and Exchange Commission.