Doctors’ Management Services, a Massachusetts-based medical management firm, has agreed to pay a $100,000 settlement to the US Department of Health and Human Services (HHS) following a 2017 ransomware attack. The company was found to have violated Health Insurance Portability and Accountability Act laws, including failing to determine risks to its electronic health information. In addition to the fine, the firm will be monitored by HHS for three years and must implement a plan to better protect customer health information.

AOA, DaVita and Bell Ambulance Breached
Healthcare organizations Alabama Ophthalmology Associates, DaVita, and Bell Ambulance were hit by ransomware attacks in 2025, compromising data of nearly 245,000 individuals. The breaches were