Health Fitness Corporation has reached a settlement with the US Department of Health and Human Services (HHS) over violations of the HIPAA Security Rule, which involved several breaches of unsecured electronic protected health information. The firm will pay $227,816 to the HHS and execute a two-year corrective action plan. This case underscores the importance of cybersecurity practices in the health industry and serves as a reminder of the costs of HIPAA noncompliance.

Fog ransomware notes troll with DOGE references, bait insider attacks
Fog ransomware attacks over the past month used a note referencing the U.S. Department of Government Efficiency (DOGE) to trick users into spreading the malware.