Cybersecurity

Columbia, Md.-based MedStar Health has begun notifying patients after determining that a cybersecurity breach in September exposed personal and medical information. The health system learned Oct. 4 that an unauthorized third party had accessed its systems. An investigation found the…

Detroit-based Henry Ford Health notified federal regulators of a data breach that affected 1,984 individuals, according to a Nov. 26 filing with the HHS Office for Civil Rights. The health system reported the incident to the agency’s breach portal as…

Reno, Nev.-based Renown Health is tightening its cybersecurity posture as AI-driven threats evolve rapidly and external attacks grow more sophisticated. Steven Ramirez, chief information security and tech officer, said the recent emergence of autonomous AI attacks — including one linked…

A judge has cleared the way for Nebraska to continue its lawsuit against Change Healthcare and its parent company, UnitedHealth Group, over a ransomware attack that compromised sensitive data for nearly half the state’s residents. In December 2024, Nebraska Attorney…

Fruita, Colo.-based Family Health West said it “swiftly detected and contained” an attempted cyberattack, with no evidence of data loss or encryption. After discovering suspicious activity, the 25-bed critical access hospital initiated cybersecurity protocols, including forensic review, engagement with experts,…

The Cybersecurity and Infrastructure Security Agency is warning hospitals about two security issues in Vertikal Systems’ Hospital Manager Backend Services that could let hackers see sensitive system information. In an Oct. 28 advisory, CISA said the problems affect versions of…

Baltimore-based LifeBridge Health said some of its patients were affected by a cybersecurity incident involving Oracle Health, the EHR vendor formerly known as Cerner. Oracle Health notified LifeBridge in March that an unauthorized third party had gained access to its…

Gardner, Mass.-based Heywood Healthcare has moved its IT systems offline following a “cybersecurity incident” at the two-hospital system. Heywood Healthcare — which includes Gardner-based Heywood Hospital, Athol (Mass.) Hospital and Heywood Medical Group — has been dealing with the outage…

Oracle has fixed a security vulnerability in its software that hospitals rushed to patch in recent weeks. The American Hospital Association and FBI urged hospitals and health systems in early October to “immediately” patch a security gap in the Oracle…

Cyberattacks on hospitals are becoming more frequent, more sophisticated and more disruptive. They can paralyze EHRs, delay surgeries and force ambulances to divert. Yet many of the most persistent vulnerabilities aren’t buried deep in code — they sit at the…