News
Aesto Health AWS Breach Hits HHS Portal at 9.54 Million Patients Across 30 Provider Clients, Including Everside Health · Data BreachTheGentlemen Ransomware Group Threatens Nutex Health's 27-Hospital Network; Class Action Filed Days After SEC Disclosure · Data BreachOCR Settles with California Eye Care Provider Azul Vision for Failure to Provide Timely Patient Record Access — 55th Right of Access Enforcement Action · OCR EnforcementShinyHunters Claims Leak of 7.1 Million Baxter International Salesforce Records Including Patient PII · Data BreachCareCloud EHR Vendor Breach Exposes Medical and Financial Data of 345,000 Patients · Data BreachOptalis Management Solutions and Other HIPAA-Regulated Entities Disclose Patient Data Breaches Affecting Thousands · Data BreachFive Small Healthcare Organizations Disclose Patient Data Breaches: Family Medical Associates of Raleigh, Arkansas Oral & Maxillofacial Surgeons, Alpine Agency of the Midlands, Princeton Family Eye Care, and Others · Data BreachAesto Health AWS Breach Hits HHS Portal at 9.54 Million Patients Across 30 Provider Clients, Including Everside Health · Data BreachTheGentlemen Ransomware Group Threatens Nutex Health's 27-Hospital Network; Class Action Filed Days After SEC Disclosure · Data BreachOCR Settles with California Eye Care Provider Azul Vision for Failure to Provide Timely Patient Record Access — 55th Right of Access Enforcement Action · OCR EnforcementShinyHunters Claims Leak of 7.1 Million Baxter International Salesforce Records Including Patient PII · Data BreachCareCloud EHR Vendor Breach Exposes Medical and Financial Data of 345,000 Patients · Data BreachOptalis Management Solutions and Other HIPAA-Regulated Entities Disclose Patient Data Breaches Affecting Thousands · Data BreachFive Small Healthcare Organizations Disclose Patient Data Breaches: Family Medical Associates of Raleigh, Arkansas Oral & Maxillofacial Surgeons, Alpine Agency of the Midlands, Princeton Family Eye Care, and Others · Data Breach
Beginnervendorpractice manager

Encryption in plain English

Why scrambling data matters, and when it helps after a theft or hack.

TL;DR

Encryption makes stolen data unreadable without keys. It is a baseline expectation for laptops, backups, and internet traffic carrying PHI.

Updated 2026-04-21

Encryption turns readable information into scrambled ciphertext unless you have the right key. Think of it as a tamper-evident envelope for digital files.

Where practices use it

  • Laptops and desktops that store or cache PHI.
  • Backups on disk or cloud.
  • Internet connections (TLS) between your EHR and browsers.

Why regulators care

If a lost encrypted device meets certain standards, you may avoid treating the event as a reportable breach, your counsel still decides based on facts.

For vendors

Offer clear documentation of what is encrypted, who holds keys, and how customers rotate credentials.

Keep reading

Next in your reading path → Access Controls: Who Can Click What

Not legal advice. Educational overview only; consult qualified counsel for your situation.