Cybersecurity

The FBI, Cybersecurity and Infrastructure Security Agency and HHS have updated a joint advisory warning that the Medusa ransomware group has hit more than 500 organizations, including hospitals, since 2021. HHS joined CISA and the FBI as a co-author of…

Health IT vendor CareCloud has reported a data breach affecting 3,756,469 individuals. The breach traces to a network disruption CareCloud discovered on March 16 in its CareCloud Health division, which temporarily disrupted access to one of the company’s six electronic…

The Justice Department has unsealed a 14-count indictment charging 17 Iranian nationals in a cyber theft conspiracy whose victims included a U.S. healthcare company and a COVID-19 vaccine developer. Prosecutors allege the defendants were leaders, contractors or hackers-for-hire affiliated with…

Cameron (Mo.) Regional Medical Center discovered June 18 that it was the victim of a ransomware attack that may have exposed patients’ protected health information. The hospital took steps to secure its systems and engaged third-party forensic specialists to investigate…

In healthcare, a data breach represents a threat to patient safety, institutional trust and the integrity of care. The leaders charged with defending against cyberattacks have become among the most critical figures in any hospital or health system.  The CISOs…

Nashville, Tenn.-based Vanderbilt Health is notifying 3,298 patients that their medical information may have been exposed after an employee clicked a malicious link in a phishing email, according to a filing with the HHS Office for Civil Rights. Vanderbilt discovered…

Anderson, S.C.-based AnMed restored MyChart access Aug. 12 for patients with an active account and a mobile number on file, 17 days after a cyber incident disrupted the health system’s IT network. Patients logging in now receive a text message…

The Cybersecurity and Infrastructure Security Agency, FBI and international partners have issued a joint advisory warning healthcare organizations about Gunra, a ransomware-as-a-service group actively targeting the sector. Gunra first emerged in April 2025 as a ransomware variant built from leaked…

Norfolk, Va.-based Sentara Health is warning patients about a phishing scam that uses fraudulent emails promising a “MyChart Medicare Kit.” The fraudulent messages carry the subject line or text “Your MyChart Medicare Kit Awaits,” according to an Aug. 11 Sentara…

Anderson, S.C.-based AnMed said unauthorized posts appeared on its social media accounts Aug. 11 as part of its ongoing cybersecurity incident. In a statement posted to its website, AnMed said it removed the content, disabled access to the platform and…