The law firm Tarter Krinsky & Drogin has reported a breach of the protected health information of 196,645 patients of its healthcare clients. Data breaches have also been announced by Park Dental in Virginia, and Heritage Pediatrics in Texas. zurl.co/S2JOD

Quest Diagnostics has identified unauthorized access to its Quantum Lab Services Manager system and says patient records were likely accessed in the incident. The scale of the data breach has yet to be determined. zurl.co/1nOuY

Data breaches have been announced by UltraMobile Imaging in New York, Artistic Smiles in Colorado, Parkview Health in Indiana, and Cognitive Behavior Therapy Center in Virginia. zurl.co/t5cLJ

Washington Gastroenterology has agreed to pay $4,600,000 to settle a consolidated class action lawsuit stemming from a 2024 security incident that exposed patient and employee information. zurl.co/kOTZC

Innovative Renal Care, a nationwide kidney care provider, has agreed to pay $900,000 in total to resolve class action litigation stemming from a 2024 data security incident affecting almost 60,000 individuals. zurl.co/PGEFU

A data breach at Ridgeway Pharmacy in Montana has affected almost 259,000 individuals. Data breaches have also been announced by IMS Care Center in Arizona and Persona Dental in Minnesota. zurl.co/bqlDl

Massachusetts AG Settles HIPAA & MassHealth Fraud Allegations with Transformative Healthcare zurl.co/dAGZf

The HHS has confirmed that the penalties for HIPAA violations will remain at 2025 levels this year and will not be subject to an annual inflation increase. zurl.co/CIy45 #HIPAA

Jefferson County Health Department in Missouri has agreed to pay $2.25 million to settle a class action lawsuit stemming from a 2022 data breach affecting almost 116,000 individuals. zurl.co/JnRUE

Last year, the HHS confirmed that it had started actively enforcing the information blocking regulations. The ONC has recently sent seven letters of nonconformity to health IT companies, most of which have agreed to change their data sharing practices. zurl.co/sXFKX

A joint cybersecurity advisory has been issued by CISA, the FBI, and the US Secret Service about the SafePay Ransomware group, which has claimed more than 600 victims across multiple critical infrastructure sectors since August 2024. zurl.co/1pppN

California and 23andMe have agreed to a $6 million settlement to resolve claims related to its 2023 data breach that affected 6.9 million individuals, including 855,000 Californians. zurl.co/4t0yt

An $80 million settlement has been proposed to resolve class action litigation against Conduent Business Services over its October 2024 cyberattack and data breach that affected 62.2 million individuals. zurl.co/cnXCe

Central Ohio Primary Care Physicians has experienced a cyberattack that involved the personal and health information of approximately 1.4 million current and former patients. zurl.co/YQF3h

Boston Children’s Health Physicians & XTIUM have agreed to pay a combined $2.7 million to resolve alleged violations of HIPAA and state laws that led to a 2024 cyberattack and data breach that affected 890,000 individuals in New York and Connecticut. zurl.co/Q0Qzo

iRhythm, a California-based manufacturer of heart monitoring devices, has confirmed that a June 2026 cybersecurity incident affected 8.2 million patients. zurl.co/5WrnY

Cyberattacks on healthcare organizations are continuing to increase, becoming costlier to resolve, and are having a greater impact on patient care, according to new research from Proofpoint and the Ponemon Institute. zurl.co/WLq2u

Mid Florida Dermatology & Plastic Surgery has announced a data breach affecting more than 85,000 patients. Data breaches have also been reported by Kannarr Eye Care in Kansas and Indiana University Health Affiliated Covered Entity. zurl.co/p0IVx

A $6.4 million settlement has been agreed to resolve claims against Sonic Healthcare U.S.A., Aurora Diagnostics, Clinical Pathology Laboratories, and Austin Pathology Associates related to the 2018 cyberattack on American Medical Collection Agency. zurl.co/B67VU

Ransomware groups are increasingly resorting to real-world threats against employees and their friends and family members to pressure victims into paying ransoms, including doxxing, swatting, and threats of physical violence. zurl.co/HeknT