health-sector cyber incidents and eHealth × AI, every week.
6 briefs
The vendor that holds 325 million patient records has stopped building features for six weeks: Epic paused most product development after Anthropic's Mythos model found that some MyChart configurations let outsiders read patient records without leaving a trace in the logs, a weakness its…
Poland's health system has been breached through its supplier layer for the second time in a month: the Medyc practice-management software used across Polish clinics was exploited through an injection flaw that gave intruders access from mid-2024 until 23 August, attackers now claim up to…
Europe's hospital cyberattacks have crossed a line from stealing data to shutting down care: a pre-HIMSS26-Europe survey found four in five hospital security buyers now report very high or extreme concern, and the French hospital group CHI Haute-Comté — struck by ransomware a year ago…
Europe's hospitals absorbed another blow to patient privacy: France's data-protection regulator fined the Hôpital Privé de la Loire in Saint-Étienne €500,000 after a cyberattack exposed the health records of more than 727,000 people — one entry in a wave that has left European hospital IT…
The fortnight's gravest healthcare story was a device maker going dark: a cyberattack knocked Boston Scientific's global operations offline, halting shipments of pacemakers and cardiac stents to hospitals worldwide and leaving newly implanted patients unable to pair their heart devices to…
The week's toll fell on patients' most sensitive records: the health-tech firm CareCloud confirmed that intruders took the medical files, insurance details and Social Security numbers of 3.75 million people from a short intrusion into its cloud, one of the year's largest health-data…