Topic
9 articles
CyberSecureToday covers HIPAA across 9 articles published between 22 Sep 2026 and 30 Sep 2026.
The coverage includes 1 vulnerability advisory and 8 incident or breach reports. 1 advisory is rated critical or high severity.
Stories on HIPAA most often intersect with SEC Form 8-K, Item 1.05 and Data Breach, with Healthcare & Pharma the most affected sector. The most recent story, “MedImpact Pharmacy Benefit Manager Breach Exposes Prescription Histories Across Corporate Health Plans”, was published 30 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Data BreachQilin ransomware syndicate exfiltrates MedImpact pharmacy benefit databases, exposing prescription records, provider details, and SSNs across employer health plans.
AWS CloudAWS discloses high-severity SSRF flaw CVE-2026-15643 in the HealthLake MCP server, enabling attackers to leak temporary SigV4 IAM credentials and healthcare FHIR records.
Cyber AttackAdaptHealth Corp files an SEC Form 8-K under Item 1.05 disclosing a cyberattack that disrupted internal systems and resulted in unauthorized patient data exfiltration.
Data BreachAstrana Health files SEC Form 8-K Item 1.05 after threat actors spoofed corporate phone numbers to socially engineer IT support and compromise patient systems.
RansomwareNutex Health files amended SEC Form 8-K Item 1.05 confirming patient PHI and provider records exfiltrated and published following ransomware double extortion.
RansomwareDigital healthcare firm iRhythm Holdings files SEC Form 8-K Item 1.05 following social engineering compromise of cloud apps and extortion threats over patient cardiac data.
Cyber AttackBiotechnology giant Amgen files SEC Form 8-K Item 1.05 after unauthorized actors infiltrated third-party cloud environments and exfiltrated sensitive patient PHI and clinical research data.
Cyber AttackDental healthcare provider Park Dental Partners files SEC Form 8-K Item 1.05 following unauthorized network intrusion risking patient clinical records and sensitive PII.
Data BreachOncology medical technology leader Novocure files SEC Form 8-K Item 1.05 disclosing an unauthorized intrusion compromising clinical data and IT infrastructure.