cognitive cybersecurity intelligence

News and Analysis

Aetna to pay $640,000 civil fine, on top of $17 million, to settle envelope breach

Aetna has agreed to pay a civil penalty of $365,211.59 in New Jersey for allowing private health information to be viewed through envelope windows. The insurer will also pay $100,000 in Connecticut and $175,000 in the District of Columbia. Additionally, Aetna is expected to pay $17 million in compensation to individuals who filed a class action lawsuit. The violations occurred when Aetna disclosed HIV/AIDS-related information and patients’ identity through mailings. CVS Health, which recently merged with Aetna, also suffered a similar security breach in April. Aetna will implement policy and training reforms to safeguard protected health information.

Source: www.healthcareitnews.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts

Google strengthens secure enterprise access from BYOD Android devices

Google strengthens secure enterprise access from BYOD Android devices

Google has launched Device Trust from Android Enterprise, a tool designed to boost security for private Android devices used for work. Device Trust uses over

Critical Adobe Illustrator Vulnerability Let Attackers Execute Malicious Code

Critical Adobe Illustrator Vulnerability Let Attackers Execute Malicious Code

Adobe has released a critical security update for Illustrator to address CVE-2025-30330, a severe heap-based buffer overflow vulnerability impacting multiple versions on Windows and macOS.

Threat Actors Leverage Weaponized HTML Files to Deliver Horabot Malware

Threat Actors Leverage Weaponized HTML Files to Deliver Horabot Malware

FortiGuard Labs has discovered a high-severity phishing campaign, active since April 2025, deploying Horabot malware to target Spanish-speaking users in Latin America. The malware uses

Weaponized Google Calendar Invites Delivers Malicious Payload With Just One Character

Weaponized Google Calendar Invites Delivers Malicious Payload With Just One Character

Cybercriminals are exploiting Google Calendar invites to deliver malware, using a single visible character that conceals malicious code. Security researchers found that this character hides