The US Department of Health and Human Services (HHS) has stated that Change Healthcare can inform consumers whose health data may have been compromised following a cyberattack earlier this year. The move, welcomed by providers, clarifies who is responsible for data breach reporting and notifications. UnitedHealth, which owns Change, agreed to handle these tasks but a breach report has not yet been filed by Change.
The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.
