At least 20 healthcare organizations have reported data breaches affecting 100,000 or more individuals to federal regulators so far in 2026, according to the HHS Office for Civil Rights breach portal. The 2026 breaches are already approaching last year’s totals.…
Cybersecurity
Sen. Bill Cassidy, MD, chairman of the Senate Health, Education, Labor and Pensions Committee, is seeking information from New York City officials about a February cybersecurity incident that affected NYC Health + Hospitals and potentially exposed sensitive patient data. In…
A Michigan federal judge has blocked Munson Healthcare’s attempt to transfer two class-action data breach lawsuits to Missouri, where dozens of similar cases against Oracle Health are consolidated. Chief Judge Hala Jarbou of the Western District of Michigan denied Munson’s…
Health system leaders told Becker’s they’re encouraged by AI developer Anthropic opening up its Project Glasswing cybersecurity initiative to healthcare, though the participant list remains largely unnamed. The company launched the project in April after opting not to publicly release…
Anthropic is adding 150 new organizations to Project Glasswing, its program to find and fix security vulnerabilities in critical software. The expansion, announced June 2, grows a program that began in early April with about 50 partners using Claude Mythos…
The Cybersecurity Working Group of the Health Sector Coordinating Council has published a guide to help hospitals and health systems manage AI-related cyber threats. The report addresses a range of threats, from traditional, reactive, machine-learning tactics to agentic AI systems…
Seventy-four percent of healthcare organizations were affected by a third-party breach in the previous 24 months, yet many still struggle to monitor vendors after they are approved, a June 1 report from KLAS Research found. Based on interviews with 46…
The American Hospital Association and Illinois Health and Hospital Association are urging the 7th U.S. Circuit Court of Appeals to reverse a lower court ruling in a website-tracking lawsuit against Evanston, Ill.-based Endeavor Health, formerly known as Edward-Elmhurst Health. In…
House Republican leaders are calling on FBI Director Kash Patel to act aggressively to stop cybercriminal groups targeting the healthcare industry. In a May 28 letter to Mr. Patel, the lawmakers pointed to the sharp increase in healthcare ransomware attacks…
Hospitals and health systems face a growing cyberattack surface because of the increasing use of largely autonomous agentic AI. Here are five updates: 1. As the Health Information Sharing and Analysis Center reported May 26: “Cyber risk is no longer…