Advertise on podcast: HIPAA Critical

In this episode, Alex and Jen discuss Microsoft's takedown of the EvilTokens phishing operation, which used AI to analyze compromised healthcare mailboxes for fraud opportunities. They also cover new Paubox automation features highlighted at their October user mixer and break down CISA's upcoming cyber incident reporting rule requiring 72-hour disclosure for critical infrastructure sectors. Healthcare leaders should prepare now for mandatory reporting requirements while strengthening session monitoring and anomaly detection capabilities.

In this episode, Alex and Jen examine three critical healthcare security stories: the Interlock ransomware attack on AngMar Management Services exposing 710 gigabytes of hospice data, pharmacy communication compliance challenges uncovered at the NCPA Annual Convention, and a 4.1 million patient record breach caused by a single compromised contractor session. The discussion highlights common root causes including poor configurations, third-party access blind spots, and insufficient monitoring, while offering practical guidance on segmentation, session management, and applying the principle of least privilege.

In this episode, Alex and Jen discuss Paubox's new Security Awareness Training add-on for HIPAA-compliant phishing simulations, examine Astrana Health's phone spoofing cyberattack and its implications for social engineering defenses, and break down Labcorp's $2.3 million settlement stemming from a 2019 vendor breach. The conversation also covers key takeaways from a recent Paubox Table dinner in Atlanta, including emerging concerns around AI governance and vendor risk management in healthcare organizations.

This episode covers Paubox's new inbound email API processing feature, insights from healthcare leaders on responsible AI adoption, and critical security updates including the Cedar County Memorial Hospital ransomware attack, an actively exploited Cisco Secure Email Gateway vulnerability, and Ambry Genetics' $700,000 HIPAA settlement. Key takeaways emphasize the importance of network segmentation, timely patching, and foundational security practices to prevent costly breaches.

In this episode, we discuss Paubox's new DLP Chat and Observe and Report features, Microsoft cloud infrastructure attacks exploiting passkey transitions, the $3.1 million Palomar Health Medical Group breach settlement, dual ransomware gang claims on Interim HealthCare, and the resurgence of fake Windows lock screen phishing tactics. We break down the security implications and actionable takeaways for healthcare organizations looking to strengthen their defenses.

This episode examines three critical developments in healthcare cybersecurity and compliance: widespread MyChart phishing campaigns targeting Medicare patients across 30+ health systems, the $15 million DaVita settlement following the 2025 Interlock ransomware attack, and California's new AB 1979 legislation restricting autonomous AI clinical decision-making. Key takeaways include proactive patient communication strategies, incident response planning, and auditing AI workflows to ensure appropriate human oversight.

In this episode, Alex and Jen discuss recent cybersecurity threats affecting healthcare organizations, including the ShinyHunters breach of oncology company Novocure and the FBI disruption of a China-linked botnet targeting hospitals. They also cover new Paubox Email API features for scheduled sends and the Senate HELP Committee's advancement of legislation to extend HIPAA-style protections to health data held by non-covered entities.

In this episode, we discuss Paubox's recognition in G2's Fall 2026 reports, a surge in MyChart phishing scams targeting patient credentials, and a Chicago cardiology practice breach that went undetected for ten weeks. We also cover the new customizable reply-to feature in Paubox Forms and examine how ransomware groups are now using AI-generated legal risk reports as a pressure tactic against victims.

In this episode, Alex and Jen discuss Paubox's new PDF import feature for HIPAA compliant forms, unified scoped API keys, and the latest IBM data on healthcare breach costs, which remain the highest of any industry at $6.6 million on average. They also cover an emerging credential theft scam targeting professionals on X and share insights from a recent Paubox Table dinner in New York, emphasizing that most security vulnerabilities stem from fixable configuration issues rather than sophisticated attacks.

In this episode, Alex and Jen discuss the latest healthcare cybersecurity threats including a major data extortion claim against NYC Health + Hospitals, sophisticated phishing campaigns using fake font files, and an in-flight Wi-Fi attack targeting travelers. They also cover the $650,000 settlement by Highland Health Systems following a 2023 breach and emphasize that most security incidents stem from preventable gaps rather than sophisticated attacks.

In this episode, we break down recent healthcare data breaches including an 83,000-record phishing incident at Aitkin County Health and a nine-year undetected email forwarding leak at Child Care Resource Center. We also cover the HHS 2026 Unified Agenda timeline, the Health-ISAC warning on ShinyHunters threat actors targeting cloud identity infrastructure, and key takeaways for strengthening your organization's security fundamentals.

In this episode, Jen and Alex cover new Paubox features including attachment preview for quarantined messages and dark mode, then discuss the alleged Abbott Laboratories data breach, emerging threats from malicious AI skills and ClickFix attacks, and privacy implications of ChatGPT Health's nationwide launch. The hosts emphasize actionable steps including vendor audits, user training, and understanding the limitations of HIPAA protection when patient data moves to consumer AI platforms.

In this episode, we break down four major healthcare cybersecurity incidents: the Craneware billing platform attack, a nonprofit breach affecting 75,000 individuals, Medtronic's exposure of nearly 370,000 patient records, and ApolloMD's $4.02 million settlement following a ransomware attack. These cases underscore critical lessons for healthcare organizations on vendor management, network segmentation, and incident response planning.

In this episode, Alex and Jen discuss a major breach affecting 542,000 individuals at Centers Laboratory, a $500,000+ ransomware settlement involving a Pennsylvania treatment facility, and the HHS delay of the final HIPAA Security Rule update to 2027. They also cover practical tools like the new Paubox Email API template gallery and emphasize how consistent security fundamentals can prevent costly incidents.

This episode examines three emerging cybersecurity threats affecting healthcare organizations: Microsoft 365 Groups being exploited for calendar-based phishing attacks, newly discovered vulnerabilities in the widely used DICOM Toolkit that could impact medical imaging systems, and a data breach that originated through social engineering targeting third-party applications. The hosts provide actionable guidance on tightening platform configurations, vetting vendors, and strengthening staff training to address these preventable security gaps.