The US Department of Health and Human Services’ Office for Civil Rights (OCR) has updated its FAQ page on Change Healthcare’s cybersecurity incident, reiterating that affected individuals must be informed about the breach. It also said that only one entity needs to issue breach notifications, preventing duplicative letters. This follows a cyber attack on UnitedHealth Group. The Federal Trade Commission is considering expanding its Health Breach Notification Rule to cover previously exempt entities.
Vladimir Putin prepares new war with ‘traditional enemy’ Britain after NHS cancer treatment delayed by targeted campaign
Vladimir Putin is poised to potentially launch a series of cyber attacks on the UK that could disrupt the country’s infrastructure and economy, warns Chancellor