NetSec.news

Clay-Platte Family Medicine and Barry Pointe Family Care in Kansas City, Missouri, and Nathan D. Granger, dba Summit Family and Sports Medicine in Harrisonville, Missouri, and Cobblestone Family Medicine Clinic dba Clay Platte Family Medicine Clinic have agreed to a $1,000,000 settlement resolving consolidated class action litigation arising from a June 2024 data breach involving the electronic protected health information (ePHI) of 53,916 individuals.

Clover Health Investments is investigating a cybersecurity incident involving unauthorized access to three employee email accounts after employees disclosed their login credentials through a social engineering attack, and the company is evaluating whether personal information or protected health information (PHI) was exposed. Clover Health Investments reported the cybersecurity incident to the U.S. Securities and Exchange Commission.

A settlement has been agreed to resolve class action litigation related to a data breach at Total Vision LLC, and the settlement has received preliminary approval from the court. Total Vision LLC owns a network of optometry centers located in California. The litigation relates to a hacking incident that occurred on or around October 30, 2020, when hackers accessed a database server containing patient information.

Memorial Healthcare Services has agreed to settle a class action lawsuit concerning the use of pixels and other tracking, web analytics, and advertising technologies on its website, subject to court approval, with a settlement fund of $750,000 for eligible class members. The lawsuit concerns the use of pixels and other tracking, web analytics, and advertising technologies on the Memorial Healthcare Services website.

Allina Health System has agreed to pay $12.5 million to resolve litigation alleging that website tracking technologies disclosed personally identifiable information (PII) and protected health information (PHI) to third parties, while the health system continues to deny wrongdoing and liability. Nonprofit health system, Allina Health System, based in Minneapolis, Minnesota reached a proposed settlement in litigation concerning its use of website tracking technologies, including pixels.

iRhythm Holdings Inc., a publicly traded manufacturer of heart monitoring devices, disclosed a cybersecurity incident involving unauthorized access to business applications hosted on a third-party platform. The incident was first identified on June 8, 2026 and was reported to the U.S. Securities and Exchange Commission through a regulatory filing.

Bartholomew County Public Hospital doing business as Columbus Regional Health has agreed to settle a class action lawsuit alleging that confidential patient information was disclosed to third-party tracking technologies through its website without patient consent. Columbus Regional Health denies the allegations and states that it agreed to resolve the litigation to avoid the expense, burden, and uncertainty of continued legal proceedings.

Henderson & Walton Women’s Center has agreed to resolve a class action lawsuit arising from a 2022 data breach that exposed the personal data and protected health information (PHI) of 34,306 individuals. Henderson & Walton Women’s Center, a women’s healthcare provider based in Birmingham, Alabama, agreed to resolve litigation linked to a data security incident involving unauthorized access to patient information.

HIPAA CyberSecurity Requirements require HIPAA-covered Entities and HIPAA Business Associates to maintain a documented security program that protects electronic protected health information through risk analysis, administrative safeguards, physical safeguards, technical safeguards, cybersecurity training, vendor oversight, incident response, backup planning, and evidence of remediation.

DentaQuest is managing a cybersecurity incident involving unauthorized access to a limited part of its network, while leaked data associated with the incident contains records tied to 2.6 million individuals following a claimed data theft by the ShinyHunters group.