A critical supply chain intrusion recently threatened France's medical infrastructure. Specifically, a French blood bank cyberattack struck industrial refrigeration equipment supporting the French Blood Establishment (EFS). Unknown adversaries altered the temperature thresholds across several national plasma cold storage repositories. Fortunately, automated environmental monitoring alarms identified the temperature spike immediately. Consequently, emergency technicians transferred the biological inventory to safe reserves without incurring damage.

TL;DR CERT/CC released a security notice on November 2, 2026. The alert warns of two serious INFINITT PACS vulnerabilities in hospital imaging systems. These flaws let attackers execute code. They also let attackers gain full admin rights. Therefore, medical teams must install the latest patches right away. They need to protect their hospital networks from harm. Why It Matters INFINITT PACS is a web tool.

At a Glance Malware Family Qilin ransomware (also known as Agenda; 4.69 MB Rust-based Windows and ESXi encryptor) Threat Actor Confirmed Russian-speaking RaaS group (linked to Moonstone Sleet and Securotrop; alleged partnership with Scattered Spider) Target / Victims

At a Glance Malware Family Qilin ransomware (also known as Agenda; 4.69 MB Rust-based Windows and ESXi encryptor) Threat Actor Confirmed Russian-speaking RaaS group (linked to Moonstone Sleet and Securotrop; alleged partnership with Scattered Spider) Target / Victims

The June 2026 data breach at iRhythm involved unauthorized access to personal and device-related information stored in third-party-hosted business applications. The attackers stole sensitive data of approximately 8.18 million individuals an

On October 21, Quest Diagnostics discovered unauthorized access to its Quanum Lab Services Manager (LSM) system. In a filing with the SEC, the lab giant said it believes "an unauthorized party accessed certain patient records." The Quest Diagnostics data breach involves both protected health information and personal data, although the company has not said how many patients are affected. What Is Quanum Lab Services Manager?

Epic Systems used an Anthropic AI model to uncover vulnerabilities that could let attackers access — and possibly alter — patient records without leaving a trace in audit logs. With healthcare topping the FBI's 2025 ransomware rankings, the discovery is a wake-up call for an industry under siege.

Unauthorized access to a file containing personal health information raises concerns. Read about Health PEI's response to the breach.

Several retired firefighters and disability board members told the committee that shifting administration or funding of LEOFF‑1 medical benefits could weaken longtime protections, urged stakeholder input on the staff survey and gave concrete membership and practice details for local boards.

Aesto Health says a December 2025 cyberattack affected more than 9.5 million people, potentially exposing medical, financial and identity data.

At a Glance Category Details Threat Actor / Kit Sneaky 2FA (suspected Phishing-as-a-Service kit) Activity Type Adversary-in-the-Middle (AiTM) phishing, session hijacking, malware delivery Targets Healthcare systems, medical schools, academic medical centers Scale 1,454 unique recipients across 565 distinct domains Law Enforcement Status Active cybercrime operation; tracked by threat researchers Primary Source Security Risk Advisors (SRA) TL;DR Security analysts discovered an active AiTM…

A massive American pharmaceutical distributor recently suffered a significant data breach. McKesson acknowledged the intrusion directly involved compromised third-party applications. The company publicly confirmed the security incident shortly after the notorious ShinyHunters ransomware group added McKesson to its dark web extortion portal. The hackers aggressively claimed they successfully exfiltrated hundreds of millions of highly sensitive patient records. The Initial Discovery and SEC Notification…