Proposed Update to HIPAA Security Rule

The Office for Civil Rights (OCR) at the U.S.  Department of Health and Human Services (HHS) issued a Notice of Proposed Rulemaking (NPRM) to modify the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule on December 27, 2024.  This would...

23andMe Settles Data Breach Class Action for $30 Million.

In October 2023, hackers were able to gain access to 23andMe customer accounts through a credential stuffing attack where the username and password used on 23andMe.com were the same as those that were used on other websites that were previously compromised or...