As cyber threats evolve, legal provisions like the Health Insurance Portability and Accountability Act (HIPAA) may not be sufficient to protect healthcare data. Proposed legislation, including the Healthcare Cybersecurity Act and the Health Infrastructure Security and Accountability Act (HISAA), could strengthen protections. However, these fail to address non-traditional health data like fitness tracker information. A more comprehensive approach is required, encompassing consumer health data and collaboration between tech and healthcare companies, as well as robust leadership from CISOs.

Veradigm’s Breach Claims Under Scrutiny After Dark Web Leak
Veradigm LLC is a health information technology company that provides software solutions to healthcare providers. On September 22, 2025, Veradigm filed breach notification letters with


