Three Russian nationals and two St. Petersburg-based “bulletproof hosting” companies face federal charges for running criminal infrastructure that enabled cyberattacks causing more than $62 million in U.S. victim losses, including against hospitals. The Justice Department unsealed the indictment July 14…
Cybersecurity news for hospitals and health systems
Healthcare cybersecurity news covering breaches, ransomware and the hospital cyberattacks that shut down clinical operations. Becker's tracks how health systems detect, respond and spend to prevent the next one.
The National Security Agency, the Cybersecurity and Infrastructure Security Agency, the Federal Bureau of Investigation (FBI) and 15 allied agencies issued a joint advisory in July on a Russian FSB unit exploiting poorly configured routers worldwide. The unit, known as…
New York City-based NYC Health + Hospitals disclosed that a data breach at business associate Solventum Health Information Systems affected 58,778 patients. The incident involved unauthorized access to protected health information by a threat actor and occurred on or around…
The U.S. Treasury Department sanctioned a VPN provider and two individuals on July 13 for supplying infrastructure and tools used in ransomware attacks that have hit U.S. hospitals, financial services firms and municipal governments. The Treasury’s Office of Foreign Assets…
A former ransomware negotiator has been sentenced to 70 months in federal prison for conspiring to extort healthcare and other companies using BlackCat/ALPHV ransomware. Angelo Martino, 41, worked as a ransomware negotiator for an incident response company where he was…
Advertisement
Healthcare organizations worldwide faced 410 ransomware attacks in the first half of 2026, up nearly 14% from the 360 attacks recorded in the second half of 2025, according to a July 9 report from Comparitech. Of the 410 attacks, 247…
AdaptHealth is investigating a cybersecurity incident after determining that unauthorized access to its systems resulted in the exfiltration of patient data and insurance billing information. According to a July 2 Securities and Exchange Commission filing, the home medical equipment provider…
A federal judge has dismissed the consolidated cyberattack lawsuit against Stryker after the plaintiffs voluntarily withdrew their claims without prejudice. U.S. District Judge Hala Jarbou of the Western District of Michigan signed an order June 30 dismissing the claims of…
For years, one of the most consequential storylines in health system operations was the cyberattack that took multiple hospitals offline. Chicago-based CommonSpirit Health in 2022, then Change Healthcare and St. Louis-based Ascension in 2024, showed how a single intrusion could…
Medtronic’s April cybersecurity incident affected more than 72,000 residents of Massachusetts and Vermont, with Social Security numbers and health records among the data exposed, state attorney general breach notification filings show. Massachusetts recorded 63,534 residents affected — with both SSNs…