New & Notable
Data privacy enforcement actions shift focus to business associates
Enforcement action trends show OCR and state attorneys general increasingly focusing on business associates and vendor data breaches, BakerHostetler found.
Stryker cyberattack: Cyberthreat actor used malicious file to mask intrusion
Stryker revealed that the cyberthreat actor used a malicious file to run commands, enabling them to conceal their activities within Stryker's environment.
CISA urges companies to bolster Microsoft Intune systems after Stryker cyberattack
CISA is urging U.S. organizations to strengthen the security of their endpoint management systems after cyberthreat actors infiltrated Stryker's Microsoft environment.
Geopolitical tensions, AI cyberthreats challenge healthcare resilience
Surveyed health IT decision-makers expressed concern about the threat of cyberwarfare and healthcare's ability to keep pace with AI-powered cyberthreats.
Stryker begins restoring ordering, shipping systems after cyberattack
— Healthcare DiveStryker experiencing widespread outage due to cyberattack
— MedTech DiveHealthcare Strategies: A Podcast
-
A podcast for healthcare professionals seeking solutions to today's and tomorrow's top challenges. Hosted by the editors of Xtelligent Healthcare Media, this podcast series focuses on real-world use cases that are leading to tangible improvements in care quality, outcomes, and cost.
Guests from leading provider, payer, government, and other organizations share their approaches to transforming healthcare in a meaningful and lasting way.
View All Episodes
Latest News
-
As genAI usage increases, health data exposure concerns rise: report
Healthcare organizations are increasingly concerned about shadow AI and data protection as generative AI becomes part of clinical and administrative workflows.
-
UMMC reopens clinics following ransomware attack
The University of Mississippi Medical Center has reopened its clinics after a ransomware attack that left its systems offline for more than a week.
-
OCR launches Part 2 civil enforcement program, new breach portal features
OCR will now accept notifications of substance use disorder patient record breaches as part of its new Part 2 civil enforcement program.
-
Texas attorney general launches investigation into Conduent breach
Texas Attorney General Ken Paxton is demanding answers from Blue Cross Blue Shield of Texas and Conduent Business Services as the data breach count grows.
-
McLaren Health agrees to $14M settlement over two data breaches
The settlement stemmed from two separate ransomware attacks that McLaren Health Care experienced in 2023 and 2024.
-
New Sequoia Project guidance takes aim at state-level patient consent challenges
The Sequoia Project emphasized the importance of aligning state-level health data laws with national technical standards to ease patient consent challenges.
Features
-
A clinical approach: How UCSD is boosting healthcare cybersecurity
The UCSD Center for Healthcare Cybersecurity is tackling cybersecurity challenges through clinician-led, science-based research projects.
-
AI adoption in healthcare will spark innovation and cyber risk in 2026
In 2026, AI will continue to drive innovation, highlighting cybersecurity, privacy and governance gaps in the process.
-
10 largest healthcare data breaches reported to OCR in 2025
More than 20 million individuals were affected by the 10 largest healthcare data breaches reported to OCR in 2025.
-
Governance gaps threaten progress as healthcare AI adoption grows
Health systems are relying on AI faster than their governance structures can evolve, expanding the potential for data privacy gaps and regulatory risk, experts say.
