News
Amplifon Discloses February 2026 Cyberattack Affecting Patients' Hearing and Medical Records, Including Social Security Numbers · Data BreachINC Ransom Claims Attack on Tanner Clinic, Utah Multispecialty Medical Group; Patient Data at Risk · Data BreachPremise Health Insider Breach Affects 417,000 Patients in Five States; Nationwide Toll May Reach Millions · Data BreachOCR Settles HIPAA Security Rule Investigation with Genetic Testing Firm for $700,000 Following 2020 Phishing Breach Affecting 225,370 Individuals · OCR EnforcementMultistate AG Coalition Reaches $10 Million Settlement with Perry Johnson & Associates Over 13.3 Million-Record Medical Transcription Breach · OCR EnforcementCognitive Health Technologies Discloses Network Intrusion Affecting 49,467 Patients; Added to HHS Breach Portal · Data BreachHCA Healthcare, Blossom Health, El Camino Health, and UMMC Disclose Patient Data Breaches; Medusa Ransomware Linked to UMMC Incident · Data BreachVida Y Salud-Health Systems and Hampton Regional Medical Center Reach Class-Action Data Breach Settlements · Data BreachMarathon Health Discloses August 2026 Social-Engineering Breach Affecting 5.7 Million Employer-Plan Members · Data BreachUniversity Hospitals (Cleveland) Still Offline Weeks After October 22 Cyberattack; EyeMed Vision Care and Facial Surgery Group Also Report Incidents · Data BreachFour Healthcare Entities Disclose New Breaches: Cognitive Health Technologies, City Ambulance Service, Baraga County Memorial Hospital, and Others · Data BreachOCR Settles HIPAA Ransomware Investigation with Lehigh Valley Health Network · OCR EnforcementHospital Ransomware Attacker Sentenced to 70 Months in Federal Prison for Extorting Healthcare Targets · OCR EnforcementConduent Agrees to $80 Million Class-Action Settlement Over 62.2 Million-Record Healthcare Data Breach · Data BreachDenver Health Medical Plan Notifies 238,000 Members After Vendor SquareML Access-Key Leak Exposes Personal and Health Data · Data BreachByod Ransomware Group Claims Attack on UNM Health Sciences Center, Disrupting Surgeries and Ambulance Diversions at New Mexico's Only Level I Trauma Center · Data BreachInsomnia Ransomware Group Claims Attack on NorthShore Health Centers; Indiana Nonprofit Warns Patients of PHI Exposure · Data BreachQuest Diagnostics Discloses Breach of Quanum Lab Services Manager; Unauthorized Party Accessed Patient Records · Data BreachManhattan Law Firm Tarter Krinsky & Drogin Reports PHI Breach Affecting 196,645 Patients; Park Dental and Heritage Pediatrics Also Disclose Incidents · Data BreachAmplifon Discloses February 2026 Cyberattack Affecting Patients' Hearing and Medical Records, Including Social Security Numbers · Data BreachINC Ransom Claims Attack on Tanner Clinic, Utah Multispecialty Medical Group; Patient Data at Risk · Data BreachPremise Health Insider Breach Affects 417,000 Patients in Five States; Nationwide Toll May Reach Millions · Data BreachOCR Settles HIPAA Security Rule Investigation with Genetic Testing Firm for $700,000 Following 2020 Phishing Breach Affecting 225,370 Individuals · OCR EnforcementMultistate AG Coalition Reaches $10 Million Settlement with Perry Johnson & Associates Over 13.3 Million-Record Medical Transcription Breach · OCR EnforcementCognitive Health Technologies Discloses Network Intrusion Affecting 49,467 Patients; Added to HHS Breach Portal · Data BreachHCA Healthcare, Blossom Health, El Camino Health, and UMMC Disclose Patient Data Breaches; Medusa Ransomware Linked to UMMC Incident · Data BreachVida Y Salud-Health Systems and Hampton Regional Medical Center Reach Class-Action Data Breach Settlements · Data BreachMarathon Health Discloses August 2026 Social-Engineering Breach Affecting 5.7 Million Employer-Plan Members · Data BreachUniversity Hospitals (Cleveland) Still Offline Weeks After October 22 Cyberattack; EyeMed Vision Care and Facial Surgery Group Also Report Incidents · Data BreachFour Healthcare Entities Disclose New Breaches: Cognitive Health Technologies, City Ambulance Service, Baraga County Memorial Hospital, and Others · Data BreachOCR Settles HIPAA Ransomware Investigation with Lehigh Valley Health Network · OCR EnforcementHospital Ransomware Attacker Sentenced to 70 Months in Federal Prison for Extorting Healthcare Targets · OCR EnforcementConduent Agrees to $80 Million Class-Action Settlement Over 62.2 Million-Record Healthcare Data Breach · Data BreachDenver Health Medical Plan Notifies 238,000 Members After Vendor SquareML Access-Key Leak Exposes Personal and Health Data · Data BreachByod Ransomware Group Claims Attack on UNM Health Sciences Center, Disrupting Surgeries and Ambulance Diversions at New Mexico's Only Level I Trauma Center · Data BreachInsomnia Ransomware Group Claims Attack on NorthShore Health Centers; Indiana Nonprofit Warns Patients of PHI Exposure · Data BreachQuest Diagnostics Discloses Breach of Quanum Lab Services Manager; Unauthorized Party Accessed Patient Records · Data BreachManhattan Law Firm Tarter Krinsky & Drogin Reports PHI Breach Affecting 196,645 Patients; Park Dental and Heritage Pediatrics Also Disclose Incidents · Data Breach
resolution agreement

Press Releases: Corrective action / RA

Resolution ,

Penalty

Corrective action / RA

Action type

Resolution agreement

Entity profile

—

Case number

—

What went wrong

Press Releases

  • Navigate to: Press Room HHS Live Podcasts The Secretary Kennedy Podcast Social Media Press Room Submit a request for commentSign up to receive our press releasesSubmit an interview request HHS Announces Heartland Forward MOU to Advance Maternal Health May 12, 2026 Press Release Secretary Kennedy Takes ‘Take Back Your Health’ Tour to Ohio, Driving Prevention-First Strategy to Make America Healthy A

Full description

Navigate to: Press Room HHS Live Podcasts The Secretary Kennedy Podcast Social Media Press Room Submit a request for commentSign up to receive our press releasesSubmit an interview request HHS Announces Heartland Forward MOU to Advance Maternal Health May 12, 2026 Press Release Secretary Kennedy Takes ‘Take Back Your Health’ Tour to Ohio, Driving Prevention-First Strategy to Make America Healthy Again May 11, 2026 Press Release HHS Supports Repatriation of U.S. Citizens to Specialized Care Facilities May 10, 2026 Press Release Trump Administration Launches Moms.Gov for New and Expecting Mothers May 10, 2026 Press Release WTAS: HHS Launches MAHA Action Plan to Curb Psychiatric Overprescribing May 6, 2026 Press Release ARPA-H Launches New Program to Deliver Rigorous, Gold-Standard Research Faster May 5, 2026 Press Release HHS Launches MAHA Action Plan to Curb Psychiatric Overprescribing May 4, 2026 Press Release WTAS: FDA Announces Major Steps to Implement Real-Time Clinical Trials April 30, 2026 Press Release FDA Releases Results from Largest-Ever Testing of Infant Formula in the U.S. April 29, 2026 Press Release WTAS: FDA Approves First-Ever Gene Therapy for Treatment of Genetic Hearing Loss Under National Priority Voucher Program April 28, 2026 Press Release 1 2 … 22 Next Submit a request for commentFor media inquiries, please submit a request for comment.Sign up to receive our press releasesSign UpSubmit an interview requestTo request an interview, please submit an interview request form.Subscribe to RSSReceive the latest updates.Press Release Archive (1991-2025)Select from the years below to view previous press releases or visit the HHS Agency Web Archive information page.1/1/24 - 1/19/25 press releases2023 press releases2022 press releases2021 press releases2020 press releases2019 press releases2018 press releases2017 press releases1991-2016 press releases Content last reviewed January 15, 2026

Timeline

  • Resolution,
  • Incident and investigation milestones are not consistently published by OCR in machine-readable form.

Key takeaways for your organization

  • Inventory endpoints and removable media; encrypt ePHI at rest where feasible and enforce secure disposal workflows.
  • Document permitted uses and disclosures; obtain valid authorizations before marketing or public-facing communications that include PHI.
  • Align policies, procedures, and evidence with the specific CFR provisions cited in OCR resolutions affecting your entity type.
  • Run tabletop exercises for breach response, OCR inquiry handling, and privilege-preserving communications with counsel.

Related actions

Source

U.S. Department of Health and Human Services release

Source: U.S. Department of Health and Human Services, Office for Civil Rights. medcomply.ai aggregates public materials for educational use, not legal advice.