News
CareCloud EHR Vendor Breach Exposes Medical and Financial Data of 345,000 Patients · Data BreachOptalis Management Solutions and Other HIPAA-Regulated Entities Disclose Patient Data Breaches Affecting Thousands · Data BreachFive Small Healthcare Organizations Disclose Patient Data Breaches: Family Medical Associates of Raleigh, Arkansas Oral & Maxillofacial Surgeons, Alpine Agency of the Midlands, Princeton Family Eye Care, and Others · Data BreachOhio Healthcare Software Vendor Unlimited Technology Systems Discloses Breach Affecting 3.8 Million Patients — Largest HHS Report of 2026 · Data BreachAmgen Patient PHI Stolen via Third-Party Cloud Vendors; Pharmaceutical Giant Discloses Breach in SEC 8-K Filing · Data BreachFour Surgical Centers and Hospitals Disclose Patient Data Breaches: Wildwood, Michigan Surgical, Penobscot Valley, and Whitfield Regional · Data BreachTheGentlemen Ransomware Group Claims Attack on Advantage Home Health Care · Data BreachCraneware Healthcare Billing Software Breach: Hackers Steal 'Significant Volume' of Data from Vendor Used by Thousands of U.S. Hospitals and Pharmacies · Data BreachCareCloud EHR Vendor Breach Exposes Medical and Financial Data of 345,000 Patients · Data BreachOptalis Management Solutions and Other HIPAA-Regulated Entities Disclose Patient Data Breaches Affecting Thousands · Data BreachFive Small Healthcare Organizations Disclose Patient Data Breaches: Family Medical Associates of Raleigh, Arkansas Oral & Maxillofacial Surgeons, Alpine Agency of the Midlands, Princeton Family Eye Care, and Others · Data BreachOhio Healthcare Software Vendor Unlimited Technology Systems Discloses Breach Affecting 3.8 Million Patients — Largest HHS Report of 2026 · Data BreachAmgen Patient PHI Stolen via Third-Party Cloud Vendors; Pharmaceutical Giant Discloses Breach in SEC 8-K Filing · Data BreachFour Surgical Centers and Hospitals Disclose Patient Data Breaches: Wildwood, Michigan Surgical, Penobscot Valley, and Whitfield Regional · Data BreachTheGentlemen Ransomware Group Claims Attack on Advantage Home Health Care · Data BreachCraneware Healthcare Billing Software Breach: Hackers Steal 'Significant Volume' of Data from Vendor Used by Thousands of U.S. Hospitals and Pharmacies · Data Breach
settlement

Read the HHS Press Release: Corrective action / RA

Resolution ,

Penalty

Corrective action / RA

Action type

Settlement

Entity profile

Case number

What went wrong

Read the HHS Press Release

Timeline

  • Resolution,
  • Incident and investigation milestones are not consistently published by OCR in machine-readable form.

Key takeaways for your organization

  • Align policies, procedures, and evidence with the specific CFR provisions cited in OCR resolutions affecting your entity type.
  • Run tabletop exercises for breach response, OCR inquiry handling, and privilege-preserving communications with counsel.
  • Revisit business associate inventory and downstream vendor security assurances after major enforcement themes in your sector.

Related actions

Source

U.S. Department of Health and Human Services release

Source: U.S. Department of Health and Human Services, Office for Civil Rights. medcomply.ai aggregates public materials for educational use, not legal advice.