How firms are reached from outside, and how the way in is closed.

In March 2026, HHS OCR settled a HIPAA investigation involving MMG Fusion, a dental software vendor whose 2020 breach affected 15 million individuals. The fine was $10,000. The precedent it sets, that risk-analysis failu

In September 2025, Ontario's Information and Privacy Commissioner issued the first administrative monetary penalty under the Personal Health Information Protection Act. The case wasn't a ransomware breach. It was a physi