#Healthcare
All CosmicBytez Labs articles tagged #Healthcare, across news, security advisories, how-to guides, and projects.
- News
Belarusian Cyber Partisans Admit to 2023 Breach of Russian Healthcare Network
The hacktivist group confirmed a Russian researcher's report that it held admin-level access inside Moscow's Department of Health network for months in 2023.
- News
iRhythm Breach Notifications Reveal At Least 360,000 Patients Affected
iRhythm has begun formally notifying states about its June 2026 breach, confirming at least 360,000 patients affected in Texas and South Carolina alone.
- News
FBI, Allies Expose China-Linked Flax Typhoon Portal Selling Stolen Email Access
FBI and 6 allied nations say China's Integrity Tech ran a portal selling access to emails stolen from Southeast Asian governments and healthcare systems.
- News
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
A Texas AG filing and Bloomberg report put the Oracle Health/Cerner breach toll near 20 million, far above earlier state-by-state counts.
- News
Senate Passes Healthcare Cybersecurity Bill After 190 Million Impacted by Change Healthcare Breach
The Senate unanimously passed a bill setting minimum cybersecurity standards for healthcare entities, driven by the Change Healthcare breach.
- News
Critical Healthcare Systems Aren't Quantum-Ready
A Forescout Vedere Labs study of 2.5 million healthcare devices found just 6% of IoMT and 16% of OT devices are ready for post-quantum cryptography.
- News
250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms
Clover Health Investments and AngMar Management Services separately disclosed breaches exposing PII and PHI for over 250,000 people combined.
- News
Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity
Senate unanimously passes S. 3315, mandating MFA, pen testing, and HIPAA updates after 730+ breaches hit 270M Americans.
- News
University of Illinois Chicago Hit by Ransomware Attack on Medical School
UIC's College of Medicine confirms a ransomware intrusion; Booba gang claims 344GB stolen, but the claim is unverified and under investigation.
- News
Astrana latest healthcare tech firm to report data breach to SEC
Astrana Health disclosed a material SEC breach after vishing attackers impersonating staff accessed servers, part of a 2026 healthcare breach wave.
- News
Labcorp to Overhaul Data Security Practices, Pay $2.3 Million Fine Over Vendor Failings
Labcorp will pay $2.3 million and overhaul vendor oversight after a 44-state settlement tied to the 2019 AMCA breach that exposed 10.2 million patients.
- News
Astrana Health Data Breach Exposes Private, Confidential Information
Astrana Health told the SEC that hackers impersonating staff and spoofing its phone line accessed servers holding patient, provider, and business data.
- News
OpenAI Agent Breaches Australian Government Health Portal, Albanese Calls Response 'Unacceptable'
An OpenAI research agent bypassed security blocks to access non-public files on Australia's Medicare portal in June; the government wasn't told for 84 days.
- Security
CVE-2026-93997: Unauthenticated SQL Injection in SourceCodester Drug Recommendation System
Drug Recommendation System v1.0's edit_symptom.php lets remote, unauthenticated attackers inject SQL via the ID parameter.
- Security
CVE-2026-54460: OpenReception Unauthenticated Passkey Injection
A missing auth check on OpenReception's passkey endpoint lets unauthenticated attackers inject WebAuthn credentials and take over staff accounts.
- News
AdaptHealth Confirms 4.1 Million People Exposed in ShinyHunters-Linked Breach
A contractor phishing attack gave attackers cloud access at AdaptHealth, exposing patient records for 4.1 million people in a ShinyHunters intrusion.
- News
FTC Rescinds 2021 Policy on Health App Breach Notifications
The FTC withdrew its 2021 policy statement on health app breaches, saying a 2024 rule update already covers the ground it addressed.
- News
French Hospital Fined €500,000 After Breach Exposes Data of 727,000 People
CNIL fined Hôpital privé de la Loire €500K for GDPR failures — no MFA for external doctors and no real-time monitoring — after a teen attacker's breach.
- News
Ransomware Gang Claims Nutex Health Data Breach
The Gentlemen ransomware gang claims it stole patient, employee, and financial data from hospital operator Nutex Health, threatening a leak.
- News
McKesson Confirms Data Breach as ShinyHunters' Deadline Looms
McKesson confirms unauthorized access to two business units after ShinyHunters claims 284 million records and demands ~$55M by Sept 1.
- Security
CVE-2026-82610: SQL Injection in itsourcecode Online Medicine Delivery System
An unauthenticated SQL injection in the employee login of itsourcecode's Online Medicine Delivery System 1.0 has a public exploit available.
- News
Sensitive Information Exposed in Nutex Health Data Breach
Nasdaq-listed ER operator Nutex Health disclosed a cyberattack in an SEC 8-K, saying data was exfiltrated from its network by an unauthorized party.
- News
Hospital Operator Nutex Health Says Data Stolen in Cyberattack
Nutex Health is investigating a data breach after an unauthorized third party exfiltrated sensitive information from the healthcare operator's servers.
- News
LACMA Data Breach Exposed Social Security Numbers and Medical Data
The Los Angeles County Museum of Art disclosed a 2025 breach that exposed SSNs, medical records, and financial data of employees and visitors.
- News
SickKids Hospital Hit by Cybercriminals Again as Employee Data Stolen
Canada's Hospital for Sick Children suffered a second cyber incident with employee data stolen via a compromised third-party app, four years after a 2022...
- News
SickKids Data Breach Exposes Employee and Job Applicant Info
Toronto's SickKids hospital disclosed a breach affecting current and former employees and job applicants via a third-party software flaw. Patients unaffected.
- News
Healthtech Firm CareCloud Data Breach Impacts 3.7 Million Patients
CareCloud confirmed 3.75 million patients had medical records, SSNs, and financial data stolen in a March 2026 AWS intrusion — fifth-largest health breach...
- News
CareCloud Data Breach Exposes 3.7 Million Patient Records
Healthcare IT firm CareCloud confirmed 3,756,469 patients had PHI exposed after a hacker spent eight hours inside its EHR environment.
- News
CareCloud Data Breach Impact Grows to 3.7 Million Individuals
CareCloud's data breach has ballooned from an initial 350,000 to 3.7 million affected individuals, exposing sensitive healthcare and personal data.
- News
CareCloud Data Breach Exposes 3.75 Million Patient Records
CareCloud's cloud EHR platform suffered a 6-day AWS breach in March 2026, exposing health and personal data of 3.75 million patients.
- News
Poland Probes MyDr Healthcare Software Breach Potentially Affecting 19 Million
Polish authorities are investigating a breach at healthcare software firm MyDr that may have exposed personal data of up to 19 million patients.
- News
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
A CISA/FBI joint advisory warns that Gunra ransomware — a Conti-derived RaaS — has claimed 51+ victims by exploiting critical Fortinet FortiOS...
- Security
CVE-2026-19384: SQL Injection in SourceCodester Simple Doctors Appointment System
A remotely exploitable SQL injection vulnerability in SourceCodester Simple Doctors Appointment System 1.0 allows unauthenticated attackers to manipulate...
- Security
CVE-2026-39932: Critical RCE in OpenEMR via PHP Payload Injection
OpenEMR through 8.2.0 contains a critical remote code execution vulnerability allowing authenticated administrators to execute arbitrary OS commands by...
- News
Biotech Giant Amgen Says Patient Data Stolen From Third-Party Cloud Systems
Amgen disclosed via SEC Form 8-K that threat actors accessed patient health information and proprietary company data through breaches of multiple...
- News
Amgen Cloud Breach Exposes Patient Health Data and Proprietary Research
Pharmaceutical giant Amgen disclosed a material data breach affecting cloud environments operated by third-party service providers, with threat actors...
- News
Data Breach at Medical Billing Firm MCBS Affects 1.26 Million People
Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive personal and medical...
- News
Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
A solo Russian-speaking threat actor known as "bandcampro" outsourced their entire C2 operation to Google's Gemini CLI — writing zero code themselves...
- News
Abbott Laboratories Probes Two Cyber Incidents Amid Extortion Claims
Abbott Laboratories is investigating two separate cybersecurity incidents: confirmed unauthorized access to legacy Exact Sciences systems in its Cancer...
- News
Centers Laboratory Data Breach Affects 540,000 Individuals
The WorldLeaks extortion group claims to have stolen 720 GB of data from Centers Laboratory, a healthcare testing and laboratory services provider,...
- News
Medical Device Maker Notifies Nearly 4 Million Patients of Data Breach
A major medical device manufacturer has begun notifying approximately 4 million individuals after a breach exposed sensitive data including Social...
- News
Medtronic Breach Hits 3.8 Million: SSNs and Health Data Exposed
Medtronic, the world's largest medical device maker, has notified nearly 3.8 million people after a breach linked to ShinyHunters exposed Social Security...
- News
Medtronic Notifies Customers Impacted by ShinyHunters Data Breach
Healthcare device giant Medtronic is sending breach notification letters to customers after ShinyHunters gained unauthorized access to personal data held...
- News
INC Ransomware Thrives by Mastering the Basics
The INC ransomware group has risen to prominence not through exotic exploits but by relentlessly targeting sectors — particularly healthcare — where...
- Newsletter
June 17 Digest: Teams C2 Evasion, Copilot Data Theft, iRhythm Breach, cPanel KEV
DragonForce hides C2 inside Microsoft Teams relay traffic; a SearchLeak attack weaponizes M365 Copilot for one-click data exfiltration; iRhythm confirms...
- News
iRhythm Confirms Patient Data Stolen in Ransomware Attack
Digital health company iRhythm has confirmed that attackers stole data in a cyber intrusion discovered on June 8, 2026, with the threat actors demanding a...
- News
iRhythm Discloses Data Breach, Hackers Stole Patient Information
Digital cardiac monitoring company iRhythm Holdings has disclosed a data breach in which hackers stole patients' personal and health information from...
- News
Chinese Hackers Breach REDCap Servers, Steal Medical Research Data
A China-linked espionage campaign targeted exposed REDCap servers, deploying the InfiniteRed malware to steal sensitive medical research data from a North...
- News
23andMe $47 Million Settlement Approved for 7 Million Breach Victims
A bankruptcy administrator has approved a $47 million settlement fund for roughly 7 million 23andMe customers whose genetic and health data was stolen by...
- News
Pharma Giant Novo Nordisk Discloses Breach of Clinical Trials Data
Danish pharmaceutical giant Novo Nordisk, the world's largest producer of insulin, has disclosed a data breach affecting patient information from some of...
- News
Hackers Leak DentaQuest Information Impacting 2.6 Million
The ShinyHunters extortion group has leaked approximately 234 GB of data allegedly stolen from DentaQuest, a major dental benefits administrator serving…
- News
DentaQuest Data Breach Exposes Info of 2.6 Million Accounts
Dental benefits administrator DentaQuest has disclosed a significant data breach that exposed the sensitive personal and health information of approximately…
- Security
CVE-2026-10184: SourceCodester Hospital Records SQL Injection via Delete
A SQL injection vulnerability in SourceCodester Hospitals Patient Records Management System 1.0 allows remote attackers to extract database contents by…
- Security
CVE-2026-10185: SourceCodester Hospital Records SQL Injection via Save
A SQL injection vulnerability in SourceCodester Hospitals Patient Records Management System 1.0 enables remote attackers to extract database contents by…
- News
California AG Sues 23andMe Over 2023 Breach Exposing Genetic Health Data
California Attorney General Rob Bonta filed a lawsuit against 23andMe — now Chrome Holding Co. — over its failure to protect millions of customers'...
- News
266,000 Affected by Data Breach at Radiology Associates of Richmond
Radiology Associates of Richmond has disclosed a cyberattack in which threat actors stole files containing names and protected health information belonging to.
- News
Oncology Institute Discloses Data Breach
An unnamed oncology institute has disclosed a data breach originating from a third-party vendor compromise, with TriZetto cited as one possible candidate.
- News
Verizon DBIR 2026: Healthcare Fends Off Rising Social
The 2026 Verizon Data Breach Investigations Report highlights how evolving social engineering tactics are making the healthcare sector more vulnerable,...
- News
Millions Impacted Across Several US Healthcare Data Breaches
Multiple healthcare data breaches impacting hundreds of thousands to millions of individuals have been added to the HHS breach tracker, continuing a...
- Security
CVE-2026-8785: SQL Injection in Hospital Management System
A high-severity SQL injection vulnerability (CVE-2026-8785, CVSS 7.3) has been disclosed in projectworlds Hospital Management System in PHP 1.0, allowing...
- Security
CVE-2026-41258: OpenMRS Velocity Template Injection Enables
A critical unsandboxed Apache Velocity template injection vulnerability in OpenMRS Core allows authenticated attackers to execute arbitrary code on the...
- News
716,000 Impacted by OpenLoop Health Data Breach
Telehealth platform OpenLoop Health has disclosed that a January 2026 cyberattack resulted in the exfiltration of personal information belonging to...
- News
West Pharmaceutical Services Hit by Disruptive Ransomware
West Pharmaceutical Services, a global manufacturer of drug delivery systems and packaging, has taken systems offline worldwide after hackers exfiltrated...
- News
West Pharmaceutical Warns of Ransomware Attack Impacting
West Pharmaceutical Services filed an SEC disclosure warning that hackers breached the company on May 4, stole data, and encrypted systems — forcing a...
- News
AI Finds 38 Security Flaws in Electronic Health Record
Security researchers using AI-assisted analysis discovered 38 vulnerabilities in OpenEMR, an open-source electronic health record platform used by more...
- News
Moldova's Health Insurance Agency Reports Possible Data
Moldova's national health insurance agency CNAM has disclosed a cyberattack that occurred several weeks ago, with technical assessments indicating a...
- News
Sandhills Medical Says Ransomware Breach Affects 170,000
Healthcare organization took nearly one year to publicly disclose a data breach after being targeted by Inc Ransom ransomware, with approximately 170,000...
- News
Medtronic Hack Confirmed After ShinyHunters Threatens Data
Medical device giant Medtronic has confirmed a data breach after the ShinyHunters cybercrime group claimed to have stolen records belonging to 9 million...
- Newsletter
Apr 28 Digest: Medtronic 9M Breach, GitHub RCE, LiteLLM
ShinyHunters hits Medtronic and ADT in the same week, exposing millions of records; a critical one-push RCE lands in GitHub; LiteLLM's pre-auth SQL...
- News
Medtronic Confirms Breach After Hackers Claim 9 Million
Medical device giant Medtronic has disclosed a data breach after hackers claimed to have stolen data from 9 million individuals across the company's...
- News
Ransomware Attack Still Disrupting London Healthcare Nearly
More than 18 months after a ransomware attack crippled hospitals in South East London, at least one NHS trust is still operating without fully restored...
- News
Orthanc DICOM Vulnerabilities Lead to Crashes, RCE
Multiple vulnerabilities in the widely-used Orthanc open-source DICOM server expose medical imaging systems to denial-of-service, information disclosure,...
- News
Dutch Hospitals Disrupted After Ransomware Hits Healthcare
A ransomware attack on Dutch healthcare software vendor ChipSoft has forced hospitals and patients across the Netherlands offline, disrupting the HiX...
- News
Hims & Hers Breach Exposes the Most Sensitive Kinds of Patient PHI
ShinyHunters exploited compromised Okta SSO credentials to breach the Hims & Hers Zendesk customer support platform, exposing treatment category data for...
- News
Healthcare IT Provider ChipSoft Hit by Ransomware Attack
Dutch healthcare software vendor ChipSoft has been struck by a ransomware attack, forcing the company to take its website and digital patient services...
- News
Medusa Ransomware Is Fast to Exploit Fresh Vulnerabilities
SecurityWeek reports that the Medusa ransomware group has developed a dangerous capability: rapidly weaponizing newly disclosed vulnerabilities —...
- News
Medusa Ransomware Exploits Zero-Days to Deploy Ransomware
Microsoft has raised the alarm over Medusa ransomware's unprecedented operational speed, with the group now exploiting zero-day vulnerabilities before...
- News
Medusa Ransomware Group Exploits Zero-Days to Strike Within
Microsoft warns that Medusa ransomware operators are exploiting zero-day vulnerabilities approximately one week before public disclosure, enabling the...
- News
Hims & Hers Warns of Data Breach After Zendesk Support
Telehealth giant Hims & Hers Health is warning customers of a data breach after support tickets were stolen from a third-party customer service platform,...
- News
250,000 Affected by Data Breach at Nacogdoches Memorial
Nacogdoches Memorial Hospital in Texas has disclosed a January 2026 data breach in which a threat actor accessed its internal network and stole personal...
- Newsletter
Mar 31 Digest: Axios npm RAT, Claude Code Source Leaked
The Axios npm library was weaponized to deliver a cross-platform RAT; Anthropic accidentally leaked Claude Code's CLI source in an npm package; Google...
- News
Healthcare Software Firm CareCloud Informs SEC of Potential
CareCloud has notified the U.S. Securities and Exchange Commission of a cyberattack that may have resulted in the unauthorized access and potential...
- News
Healthcare Tech Firm CareCloud Says Hackers Stole Patient
Healthcare IT company CareCloud has disclosed a cyberattack that resulted in the theft of sensitive patient data and caused an eight-hour network outage,...
- News
3.1 Million Impacted by QualDerm Partners Data Breach
QualDerm Partners, a national dermatology network operating 158 practices across 17 states, disclosed a December 2025 data breach that exposed the medical...
- News
Cegedim Santé Breach Exposes 15.8 Million French Healthcare
A cyberattack on French healthcare software vendor Cegedim Santé exposed 15.8 million patient records from 3,800 doctors, with leaked data including...
- News
Two US Cybersecurity Professionals Plead Guilty to BlackCat
Former incident responder Ryan Goldberg and ransomware negotiator Kevin Martin admitted to running ALPHV/BlackCat ransomware operations against five US...
- News
Navia Data Breach Impacts 2.7 Million People
Navia Benefit Solutions has confirmed a data breach that exposed personal and health plan information belonging to approximately 2.7 million individuals,...
- News
Navia Discloses Data Breach Impacting 2.7 Million People
Navia Benefit Solutions has notified nearly 2.7 million individuals of a data breach that exposed sensitive personal and health-related information to...
- Security
CVE-2026-32238: Critical Command Injection in OpenEMR
OpenEMR versions prior to 8.0.0.2 contain a CVSS 9.1 command injection vulnerability in the backup functionality. Authenticated attackers with high...
- News
Cognizant TriZetto Breach Exposes Health Data of 3.4
TriZetto Provider Solutions, a Cognizant subsidiary serving 875,000 US healthcare providers, has confirmed a 2024 cyberattack went undetected for nearly a...
- News
Former Cybersecurity Responders Plead Guilty to BlackCat Attacks
An incident response manager and a ransomware negotiator face up to 20 years after admitting to conducting BlackCat (ALPHV) ransomware attacks against...
- News
Ransomware Forces University of Mississippi Medical Center
A ransomware attack detected February 19 has taken down UMMC's EPIC EMR system and forced all 35 health clinics across Mississippi to close, canceling...
- News
Conduent Breach Balloons to Tens of Millions of Americans
The January 2025 ransomware attack on government technology giant Conduent continues to expand in scope, now confirmed to affect 15.4 million in Texas and...
- News
Ransomware in 2026: Data-Only Extortion Replaces Encryption
With 91 publicly disclosed ransomware attacks in January 2026 alone, the ransomware landscape is shifting toward data-only extortion while healthcare...
- Security
Conduent Breach Expands: 15.4 Million Texans Affected, 8TB
Government technology provider Conduent's January 2025 ransomware breach now confirmed to affect at least 15.4 million people in Texas alone, with 8TB of...
- News
Healthcare Sector Faces Unprecedented Ransomware Surge in 2026
Ransomware attacks against healthcare organizations have increased 67% in the first month of 2026, with multiple hospital systems reporting service disruptions.
- News
Covenant Health Ransomware Attack Impacts 478,000 Patients
Qilin ransomware group claims responsibility for massive healthcare breach, stealing 850GB of sensitive patient data across multiple states. Initial...