Denver Health Medical Plan has notified more than 238,000 individuals about a vendor-related data incident. Data breaches have also been announced by Johns Hopkins Bayview Medical Center and BASS Medical Group. zurl.co/rVWVh

A data privacy incident has been announced by NorthShore Health Centers in Northwest Indiana. Patient data appears to have been obtained in the incident. zurl.co/YUFiF

HHS Delegates Permissive Exclusion Authority to CMS - zurl.co/xm3rg

Brockton Neighborhood Health Center has agreed to pay up to $850,000 to settle class action litigation stemming from a 2024 ransomware attack that affected more than 97,000 current and former patients. zurl.co/LOY14

Free Webinar Tomorrow, Wednesday, October 28, 2026: A Practical Guide to a #HIPAA Security Risk Assessment. Gain valuable information on how to improve your risk assessment practices. zurl.co/PPmMz

Data breaches have been announced by Paylogix, Wichita Family Dental, the Kenaitze Indian Tribe, and the Center for Bone and Joint Surgery of the Palm Beaches. zurl.co/apAXX

Between June 2025 and June 2025, 69% of organizations experienced a data breach. Out of all affected individuals, 69% were affected by a data breach at a third-party vendor. zurl.co/9XhfK

Four vulnerabilities have been identified in the HAPI FHIR open source component used in Smile Digital Health’s Smile CDR clinical data repository and health data platform. zurl.co/56wDm

Free Webinar on Wednesday October 28, 2026: A Practical Guide to a #HIPAA Security Risk Assessment. Gain valuable information on how to improve your risk assessment practices. zurl.co/Opubv

The law firm Tarter Krinsky & Drogin has reported a breach of the protected health information of 196,645 patients of its healthcare clients. Data breaches have also been announced by Park Dental in Virginia, and Heritage Pediatrics in Texas. zurl.co/S2JOD

Quest Diagnostics has identified unauthorized access to its Quantum Lab Services Manager system and says patient records were likely accessed in the incident. The scale of the data breach has yet to be determined. zurl.co/1nOuY

Data breaches have been announced by UltraMobile Imaging in New York, Artistic Smiles in Colorado, Parkview Health in Indiana, and Cognitive Behavior Therapy Center in Virginia. zurl.co/t5cLJ

Washington Gastroenterology has agreed to pay $4,600,000 to settle a consolidated class action lawsuit stemming from a 2024 security incident that exposed patient and employee information. zurl.co/kOTZC

Innovative Renal Care, a nationwide kidney care provider, has agreed to pay $900,000 in total to resolve class action litigation stemming from a 2024 data security incident affecting almost 60,000 individuals. zurl.co/PGEFU

A data breach at Ridgeway Pharmacy in Montana has affected almost 259,000 individuals. Data breaches have also been announced by IMS Care Center in Arizona and Persona Dental in Minnesota. zurl.co/bqlDl

Massachusetts AG Settles HIPAA & MassHealth Fraud Allegations with Transformative Healthcare zurl.co/dAGZf

The HHS has confirmed that the penalties for HIPAA violations will remain at 2025 levels this year and will not be subject to an annual inflation increase. zurl.co/CIy45 #HIPAA

Jefferson County Health Department in Missouri has agreed to pay $2.25 million to settle a class action lawsuit stemming from a 2022 data breach affecting almost 116,000 individuals. zurl.co/JnRUE

Last year, the HHS confirmed that it had started actively enforcing the information blocking regulations. The ONC has recently sent seven letters of nonconformity to health IT companies, most of which have agreed to change their data sharing practices. zurl.co/sXFKX

A joint cybersecurity advisory has been issued by CISA, the FBI, and the US Secret Service about the SafePay Ransomware group, which has claimed more than 600 victims across multiple critical infrastructure sectors since August 2024. zurl.co/1pppN