News
Multistate AG Coalition Reaches $10 Million Settlement with Perry Johnson & Associates Over 13.3 Million-Record Medical Transcription Breach · OCR EnforcementCognitive Health Technologies Discloses Network Intrusion Affecting 49,467 Patients; Added to HHS Breach Portal · Data BreachHCA Healthcare, Blossom Health, El Camino Health, and UMMC Disclose Patient Data Breaches; Medusa Ransomware Linked to UMMC Incident · Data BreachVida Y Salud-Health Systems and Hampton Regional Medical Center Reach Class-Action Data Breach Settlements · Data BreachMarathon Health Discloses August 2026 Social-Engineering Breach Affecting 5.7 Million Employer-Plan Members · Data BreachUniversity Hospitals (Cleveland) Still Offline Weeks After October 22 Cyberattack; EyeMed Vision Care and Facial Surgery Group Also Report Incidents · Data BreachFour Healthcare Entities Disclose New Breaches: Cognitive Health Technologies, City Ambulance Service, Baraga County Memorial Hospital, and Others · Data BreachOCR Settles HIPAA Ransomware Investigation with Lehigh Valley Health Network · OCR EnforcementHospital Ransomware Attacker Sentenced to 70 Months in Federal Prison for Extorting Healthcare Targets · OCR EnforcementConduent Agrees to $80 Million Class-Action Settlement Over 62.2 Million-Record Healthcare Data Breach · Data BreachDenver Health Medical Plan Notifies 238,000 Members After Vendor SquareML Access-Key Leak Exposes Personal and Health Data · Data BreachByod Ransomware Group Claims Attack on UNM Health Sciences Center, Disrupting Surgeries and Ambulance Diversions at New Mexico's Only Level I Trauma Center · Data BreachInsomnia Ransomware Group Claims Attack on NorthShore Health Centers; Indiana Nonprofit Warns Patients of PHI Exposure · Data BreachQuest Diagnostics Discloses Breach of Quanum Lab Services Manager; Unauthorized Party Accessed Patient Records · Data BreachManhattan Law Firm Tarter Krinsky & Drogin Reports PHI Breach Affecting 196,645 Patients; Park Dental and Heritage Pediatrics Also Disclose Incidents · Data BreachMedical Data Rx Breach: The Gentlemen/VYPR Ransomware Group Claims Attack on Michigan Healthcare IT Vendor; Class Action Investigation Launched · Data BreachMid Florida Dermatology & Plastic Surgery Discloses Breach Affecting 85,585 Patients; Kannarr Eye Care and Indiana University Health Also Report Incidents · Data BreachMultistate AG Coalition Reaches $10 Million Settlement with Perry Johnson & Associates Over 13.3 Million-Record Medical Transcription Breach · OCR EnforcementCognitive Health Technologies Discloses Network Intrusion Affecting 49,467 Patients; Added to HHS Breach Portal · Data BreachHCA Healthcare, Blossom Health, El Camino Health, and UMMC Disclose Patient Data Breaches; Medusa Ransomware Linked to UMMC Incident · Data BreachVida Y Salud-Health Systems and Hampton Regional Medical Center Reach Class-Action Data Breach Settlements · Data BreachMarathon Health Discloses August 2026 Social-Engineering Breach Affecting 5.7 Million Employer-Plan Members · Data BreachUniversity Hospitals (Cleveland) Still Offline Weeks After October 22 Cyberattack; EyeMed Vision Care and Facial Surgery Group Also Report Incidents · Data BreachFour Healthcare Entities Disclose New Breaches: Cognitive Health Technologies, City Ambulance Service, Baraga County Memorial Hospital, and Others · Data BreachOCR Settles HIPAA Ransomware Investigation with Lehigh Valley Health Network · OCR EnforcementHospital Ransomware Attacker Sentenced to 70 Months in Federal Prison for Extorting Healthcare Targets · OCR EnforcementConduent Agrees to $80 Million Class-Action Settlement Over 62.2 Million-Record Healthcare Data Breach · Data BreachDenver Health Medical Plan Notifies 238,000 Members After Vendor SquareML Access-Key Leak Exposes Personal and Health Data · Data BreachByod Ransomware Group Claims Attack on UNM Health Sciences Center, Disrupting Surgeries and Ambulance Diversions at New Mexico's Only Level I Trauma Center · Data BreachInsomnia Ransomware Group Claims Attack on NorthShore Health Centers; Indiana Nonprofit Warns Patients of PHI Exposure · Data BreachQuest Diagnostics Discloses Breach of Quanum Lab Services Manager; Unauthorized Party Accessed Patient Records · Data BreachManhattan Law Firm Tarter Krinsky & Drogin Reports PHI Breach Affecting 196,645 Patients; Park Dental and Heritage Pediatrics Also Disclose Incidents · Data BreachMedical Data Rx Breach: The Gentlemen/VYPR Ransomware Group Claims Attack on Michigan Healthcare IT Vendor; Class Action Investigation Launched · Data BreachMid Florida Dermatology & Plastic Surgery Discloses Breach Affecting 85,585 Patients; Kannarr Eye Care and Indiana University Health Also Report Incidents · Data Breach
HIPAA compliance, simplifiedUpdated today

HIPAA compliance for your practice, handled.

Built for healthcare organizations that need real answers, not legal jargon. Get instant HIPAA guidance, generate compliant documents in minutes, track enforcement actions, and train your staff, all in one place.

Ask a HIPAA questionBrowse insights
  • Designed for 6M+ HIPAA-covered entities
  • Updated daily from OCR & HHS
  • 100% client audit pass rate

New to HIPAA?

Not sure where to start? We've got you.

Plain English HIPAA guidance for every role at your organization. No prior compliance experience needed.

Explore HIPAA Basics →
I'm front desk staff →I'm a practice manager →I'm a healthcare provider →I'm a software vendor →
Regulations Monitored
14,800+

Federal & state healthcare privacy statutes

OCR Penalties Catalogued
$134M

Enforcement actions since HITECH Act

Updates This Quarter
847

Guidance memos, alerts & rule changes

HIPAA-Covered Entities
6M+

Practices, health systems, payers & vendors

224 enforcement actions tracked · $120.8M in total penalties · Updated weekly

Open Enforcement Hub

Latest insights

What you need to know this week

Browse insightsView all enforcement actions →

Compliance Tools

Built-in tools for every compliance workflow

Purpose-built compliance tools for assessment, documentation, and incident readiness.

BAA Workflow

Free with account

BAA Generator

Draft HIPAA-oriented BAA language with structured clauses for security obligations, incident notice, and subcontractor flow-down terms.

Open BAA Generator

Security Rule

Risk Assessment

Run a weighted HIPAA Security Rule assessment and generate a downloadable PDF report with prioritized remediation actions.

Run Risk Assessment

Incident Response

Pro feature

Breach Notification Checker

Determine in minutes whether your security incident requires HIPAA breach notification, with a downloadable incident report.

Open Breach Checker

Use cases

Guidance mapped to each compliance audience

Pick your role and jump straight to practical implementation articles.

Covered entities

Operational intelligence for provider organizations, plans, and care teams.

New to HIPAA? Start with the basics

Business associates

Hands-on guidance for SaaS, IT vendors, and downstream subcontractors.

New to HIPAA? Start with the basics

Compliance officers

Program-building playbooks for audits, risk management, and governance.

New to HIPAA? Start with the basics