News
Amazon's One Medical Seniors Hit by ShinyHunters Extortion Group: 8.8TB of Legacy Patient Data at Risk · Data BreachOpenLoop Health Telehealth Infrastructure Vendor Breach Exposes Patient Data Across Multiple Digital Health Clients · Data BreachHealthcare AI Vendor Xsolis Breach Exposes 1.4 Million Records Across Seven Hospital Systems Including Mayo Clinic · Data BreachHHS Breach Portal Backlog: OCR Still Adding March 2026 Breaches in Late June — What the Delay Means for Compliance Teams · AnalysisKettering Health Refused to Pay the Ransom. The Data Leaked Anyway: What 1.7 Million Exposed Records Teach About Ransomware and HIPAA · Data BreachOCR Settles Ransomware Investigation with Employer-Sponsored Health Plan for $450,000 · OCR EnforcementWhy a Third of Healthcare Breaches Now Trace Back to a Vendor: A Mid-Year 2026 Analysis · AnalysisFrom 4 Million to 60+ Million: The Conduent Breach Shows How Far Third-Party Risk Reaches · Data BreachNYC Health + Hospitals Breach: 1.8 Million Records Exposed via Third-Party Vendor, Including Biometric Data · Data BreachWhen Your Vendor Is the Breach: Millions of Patient Records Just Hit the HHS Tracker, and the Common Thread Is Third-Party Risk · Data BreachDo I Need a BAA With My Vendor? A Plain-English Guide to Which Vendors Require a Business Associate Agreement · Business AssociatesAmazon's One Medical Seniors Hit by ShinyHunters Extortion Group: 8.8TB of Legacy Patient Data at Risk · Data BreachOpenLoop Health Telehealth Infrastructure Vendor Breach Exposes Patient Data Across Multiple Digital Health Clients · Data BreachHealthcare AI Vendor Xsolis Breach Exposes 1.4 Million Records Across Seven Hospital Systems Including Mayo Clinic · Data BreachHHS Breach Portal Backlog: OCR Still Adding March 2026 Breaches in Late June — What the Delay Means for Compliance Teams · AnalysisKettering Health Refused to Pay the Ransom. The Data Leaked Anyway: What 1.7 Million Exposed Records Teach About Ransomware and HIPAA · Data BreachOCR Settles Ransomware Investigation with Employer-Sponsored Health Plan for $450,000 · OCR EnforcementWhy a Third of Healthcare Breaches Now Trace Back to a Vendor: A Mid-Year 2026 Analysis · AnalysisFrom 4 Million to 60+ Million: The Conduent Breach Shows How Far Third-Party Risk Reaches · Data BreachNYC Health + Hospitals Breach: 1.8 Million Records Exposed via Third-Party Vendor, Including Biometric Data · Data BreachWhen Your Vendor Is the Breach: Millions of Patient Records Just Hit the HHS Tracker, and the Common Thread Is Third-Party Risk · Data BreachDo I Need a BAA With My Vendor? A Plain-English Guide to Which Vendors Require a Business Associate Agreement · Business Associates
resolution agreement

Press Releases: Corrective action / RA

Resolution ,

Penalty

Corrective action / RA

Action type

Resolution agreement

Entity profile

—

Case number

—

What went wrong

Press Releases

  • Navigate to: Press Room HHS Live Podcasts The Secretary Kennedy Podcast Social Media Press Room Submit a request for commentSign up to receive our press releasesSubmit an interview request HHS Announces Heartland Forward MOU to Advance Maternal Health May 12, 2026 Press Release Secretary Kennedy Takes ‘Take Back Your Health’ Tour to Ohio, Driving Prevention-First Strategy to Make America Healthy A

Full description

Navigate to: Press Room HHS Live Podcasts The Secretary Kennedy Podcast Social Media Press Room Submit a request for commentSign up to receive our press releasesSubmit an interview request HHS Announces Heartland Forward MOU to Advance Maternal Health May 12, 2026 Press Release Secretary Kennedy Takes ‘Take Back Your Health’ Tour to Ohio, Driving Prevention-First Strategy to Make America Healthy Again May 11, 2026 Press Release HHS Supports Repatriation of U.S. Citizens to Specialized Care Facilities May 10, 2026 Press Release Trump Administration Launches Moms.Gov for New and Expecting Mothers May 10, 2026 Press Release WTAS: HHS Launches MAHA Action Plan to Curb Psychiatric Overprescribing May 6, 2026 Press Release ARPA-H Launches New Program to Deliver Rigorous, Gold-Standard Research Faster May 5, 2026 Press Release HHS Launches MAHA Action Plan to Curb Psychiatric Overprescribing May 4, 2026 Press Release WTAS: FDA Announces Major Steps to Implement Real-Time Clinical Trials April 30, 2026 Press Release FDA Releases Results from Largest-Ever Testing of Infant Formula in the U.S. April 29, 2026 Press Release WTAS: FDA Approves First-Ever Gene Therapy for Treatment of Genetic Hearing Loss Under National Priority Voucher Program April 28, 2026 Press Release 1 2 … 22 Next Submit a request for commentFor media inquiries, please submit a request for comment.Sign up to receive our press releasesSign UpSubmit an interview requestTo request an interview, please submit an interview request form.Subscribe to RSSReceive the latest updates.Press Release Archive (1991-2025)Select from the years below to view previous press releases or visit the HHS Agency Web Archive information page.1/1/24 - 1/19/25 press releases2023 press releases2022 press releases2021 press releases2020 press releases2019 press releases2018 press releases2017 press releases1991-2016 press releases Content last reviewed January 15, 2026

Timeline

  • Resolution,
  • Incident and investigation milestones are not consistently published by OCR in machine-readable form.

Key takeaways for your organization

  • Inventory endpoints and removable media; encrypt ePHI at rest where feasible and enforce secure disposal workflows.
  • Document permitted uses and disclosures; obtain valid authorizations before marketing or public-facing communications that include PHI.
  • Align policies, procedures, and evidence with the specific CFR provisions cited in OCR resolutions affecting your entity type.
  • Run tabletop exercises for breach response, OCR inquiry handling, and privilege-preserving communications with counsel.

Related actions

Ending Anti-Semitism on College Campuses

—

,

Keeping Food Ingredients Safe

—

,

Breach Reporting

—

,

Source

U.S. Department of Health and Human Services release

Source: U.S. Department of Health and Human Services, Office for Civil Rights. medcomply.ai aggregates public materials for educational use, not legal advice.