Healthcare has been among the industries most affected by data breaches related to staff mistakes, according to Verizon. “Breaches take many forms, but in the healthcare sector, one pattern stands out: miscellaneous errors,” the telecom giant stated in its annual…
Cybersecurity
AI company Anthropic is enabling users previewing Claude Mythos to share their cybersecurity findings with other organizations. Here are six things to know about the development and what it means for healthcare: 1. Anthropic decided not to publicly release its…
HHS is proposing a major overhaul of the HIPAA Security Rule, a move that would introduce new mandatory cybersecurity requirements for hospitals, health systems and other covered entities. On Jan. 6, 2025, HHS’ Office for Civil Rights published a Notice…
A new report released May 18 outlines the potential risks of Anthropic’s Claude Mythos, which has health system leaders on edge because of the AI’s ability to detect and exploit cybersecurity vulnerabilities Here are six things to know from the…
The U.S. Department of Health and Human Services is reorganizing its Office for Civil Rights, restoring separate divisions focused on civil rights and conscience and religious freedom. The restructuring returns the office to a program-based model with three divisions: the…
Advertisement
A Rutgers-led study found hospitals that use third-party tracking pixels on their websites were significantly more likely to experience data breaches. Researchers at Rutgers Business School-Newark and New Brunswick analyzed 12 years of website data from 1,201 hospitals and found…
Clinicians across the country are using AI tools their organizations never approved, often to solve real, urgent problems. The phenomenon, known as shadow AI, sits at the center of a governance challenge that is growing faster than most health systems…
Three health systems took home honors at the 2026 CSO Cybersecurity Awards. The May 11 ceremony in Nashville, Tenn., recognized “security initiatives that delivered measurable results and not just innovation in isolation — across areas such as AI compliance and…
The U.S. Cybersecurity and Infrastructure Security Agency has rolled out an initiative to fortify critical infrastructure sectors’ cybersecurity against attacks from nation-state threat actors, the American Hospital Association reported. The project underscores the importance of preemptive isolation and recovery planning when…
A federal lawsuit tied to Prospect Medical Holdings’ 2023 data breach has been voluntarily dismissed. According to a filing in the U.S. District Court for the Eastern District of Pennsylvania, plaintiffs and Los Angeles-based Prospect Medical Holdings jointly filed a…