By Freddie Sanchez – The recent Canvas data breach sent shockwaves through education, but it’s a situation all too familiar for those of us in healthcare. For years, our industry has consistently been a top target for bad actors, and that trend is unlikely to change anytime soon.
Read More
By Gilda D’Incerti – Healthcare cybersecurity has typically been viewed as a technical responsibility, with security teams focused on protecting networks, securing electronic health records, and responding to ransomware incidents. Now, that framing is no longer sufficient.
By Zac Amos – With cyberattacks in the healthcare industry becoming increasingly prevalent over the past few years, cybersecurity infrastructure has had to develop rapidly. Yet, traditional methods often focus exclusively on technical barriers such as firewalls and encryption. They overlook one of the health sector’s most underappreciated risks: human error.
By Matt Fisher – Revealing a data breach can be a hard action for an organization to take. The ongoing stream of notifications still generates attention, which is typically not positive when a security breakdown is revealed. At the same time, the notification is (or should be) unavoidable since the HIPAA breach notification rule is clear about what action is necessary.
By Jason Stewart – Despite the fact that the majority of healthcare data breaches are due to the inadequate security of third-party vendors, the vetting of these partners is still uneven across the industry.
By Erik Eisen – Why Healthcare Practices Can’t Afford to Treat Cybersecurity Like a To-Do List. I’ve heard the fear and anxiety in the wake of a cybersecurity incident, “I wasn’t scared when it happened. I was scared when I realized how long we’d ignored it.” That’s the problem. “Cybersecurity” has become white noise.
By Zac Amos – Healthcare IT leaders already understand that attackers have them in their sights, but the gulf between knowing and acting remains wide. Penetration testing — or pen testing — closes that gap by providing proof of how systems can be breached and data exfiltrated.
By Usman Choudhary – In 2025, as AI continues to evolve, the cost of breaches skyrockets, and regulatory scrutiny tightens, healthcare organizations must go beyond technical defenses and prioritize comprehensive security awareness training.
By Jay Trinckes – In recent years, healthcare organizations have struggled to address the rising number of data breaches and cyberattacks plaguing the industry. The Change Healthcare breach in particular caused the exposure of the protected health information of as many as one in three Americans earlier this year.