More than 10 U.S. health care systems were breached during a cyberattack of Seattle-based MCG Health, affecting up to 1.1 million patients, HIPAA Journal reports. MCG Health, a subsidiary of Hearst Health, is facing multiple class-action lawsuits as a result of the breach, during which an “unauthorized third party” obtained patient files that included names, Social Security numbers, medical codes, mailing addresses, telephone numbers and email addresses. The lawsuits allege MCG Health acted negligently by failing to recognize the breach for at least two weeks.
29 June 2022
MCG Health breach exposed personal data of more than 1M patients
Related stories
A view from DC: US Senate hearing gives a preview of AI on Cruz control
New York State of Mind: A discussion with NYC Chief Privacy Officer Michael Fitzpatrick
Notes from the IAPP Canada: Building momentum during Privacy Awareness Week
Notes from the Asia-Pacific region: OPC releases draft guidance on Privacy Act amendment
A view from Brussels: From coal and steel in 1950, to cybersecurity and AI in 2025