Kettering (Ohio) Health is notifying patients and affiliates of a data security incident involving unauthorized access to parts of its network earlier in 2025. Becker’s previously reported in May that the 14-hospital system confirmed a ransomware attack was behind an…
Cybersecurity news for hospitals and health systems
Healthcare cybersecurity news covering breaches, ransomware and the hospital cyberattacks that shut down clinical operations. Becker's tracks how health systems detect, respond and spend to prevent the next one.
The American Hospital Association is notifying hospitals and health systems about a critical software vulnerability involving Notepad++, a free, open-source coding program used in healthcare. The vulnerability affected an update component affecting editions of the program before version 8.8.9, allowing…
Woodsville, N.H.-based Cottage Hospital has begun notifying patients after discovering that an unauthorized party accessed parts of its computer network late last year, potentially exposing sensitive patient information. The hospital began mailing notification letters Feb. 5 to certain patients whose…
Federal auditors were able to gain access to a large southeastern hospital’s internal systems after successfully capturing an employee’s login credentials during a phishing campaign, according to the HHS Office of the Inspector General. OIG found the hospital generally had…
The Congressional Budget Office has estimated that the Rural Hospital Cybersecurity Enhancement Act would cost $8 million over five years. The legislation would require the Department of Health and Human Services to recommend ways to improve recruitment and training of…
Advertisement
Federal prosecutors have filed more charges against a California man accused of stealing the data of 1.3 million patients of Danville, Pa.-based Geisinger. Max Vance now faces two counts of giving false statements to federal agents, according to a Feb.…
Healthcare cyber incidents increased by 21% in 2025, though the rise wasn’t as sharp as in other sectors, according to the Health Information Sharing and Analysis Center. Here are five things to know from Health ISAC’s Jan. 30 report: 1.…
Newark, Del.-based ChristianaCare and Oracle Health have been sued over a data breach involving the EHR vendor’s legacy Cerner systems. Two patients filed the proposed class-action lawsuit in December in U.S. District Court for the District of Delaware, alleging the…
A U.S. Senate Committee has unanimously passed a bill that aims to bolster rural hospitals’ cybersecurity workforce. The Rural Hospital Cybersecurity Enhancement Act, which is supported by the American Hospital Association, would require HHS to develop a comprehensive rural healthcare…
Ten health system executives made the list of the top chief information security officers of 2026 from CISO Connect, a professional organization for IT security leaders. A group of CISOs from across industries, including healthcare, picked the 2026 CISOs Top…