RevSpring

DC Medicaid agency exposed personal and protected health information for approximately 400,000 beneficiaries due to an online data exposure.

Paubox angle · Data Loss Prevention: A 400k+ breach at a state Medicaid agency demonstrates the risk of uncontrolled PHI exposure. Healthcare organizations handling Medicaid data should evaluate whether DLP controls are in place to prevent sensitive beneficiary information from leaving via email.

The HIPAA Journal

MedImpact PBM breach exposes health data of employer plan members.

Paubox angle · Data Loss Prevention: PBM and revenue cycle breaches signal systemic data protection gaps in pharmacy and claims workflows. If email-based data sharing is part of the exposure chain, DLP and archiving become critical compliance levers.

Insurance Business

MEDIMPACT data breach exposed social security numbers and health information; law firm investigating on behalf of affected individuals.

Paubox angle · Data Loss Prevention: Large healthcare data breach affecting multiple individuals increases scrutiny across the sector; customers should audit email security controls to prevent downstream PHI exfiltration.

PR Newswire

McKesson, a major healthcare distributor and pharmaceutical supplier, suffered a cyberattack exposing 6.4 million email addresses. Email addresses are a gateway for follow-up phishing and BEC attacks targeting healthcare providers.

Paubox angle · Inbound Security upgrade: This breach exposes a massive email list likely to be used for phishing campaigns against healthcare customers. Paubox inbound security and Email Suite adoption is a direct defense against secondary phishing targeting this exposed population.

The HIPAA Journal

McKesson, a major healthcare supplier, suffered a voice-phishing attack that led to data theft and lawsuits. The incident highlights ongoing phishing and social engineering risks across the healthcare sector.

Paubox angle · Inbound Security upgrade: Phishing and voice-based social engineering are gateway attacks to healthcare breaches. Inbound email security with threat detection can catch phishing attempts before they reach staff, reducing the attack surface that leads to larger data theft incidents.

Law.com