House Subcommittee on Health Examines Healthcare Cybersecurity Proposals

Posted by Steve Alder

On September 15, 2026, the United States House Energy and Commerce Committee Subcommittee on Health held a legislative hearing on proposals to improve healthcare cybersecurity, reform Medicare provider payments, and other healthcare matters. At the hearing, titled Examining Legislative Proposals to Reform Medicare Provider Payment and Bolster Health Care Cybersecurity, the subcommittee discussed two bills that seek to improve healthcare cybersecurity – the Rural Hospital Cybersecurity Enhancement Act and the Healthcare Cybersecurity and Resiliency Act of 2026.

Healthcare data breaches have increased significantly in recent years. For the past five years, more than 700 data breaches affecting 500 or more individuals have been reported to the HHS’ Office for Civil Rights (OCR), and a new record was set in 2025, with 804 large data breaches currently listed on the OCR data breach portal. As of August 30, 2026, 496 large data breaches have been reported to OCR, indicating that 2026 will be another 700+ data breach year. So far this year, more than 74.6 million individuals have had their protected health information exposed. Last year, 140.5 million individuals were affected by large healthcare data breaches.

The increase in data breaches is largely driven by hacking and other IT incidents. Out of this year’s 496 large data breaches, 426 breaches are due to hacking and other IT incidents. That’s 86% of this year’s total, and accounts for 97.8% of the individuals whose protected health information has been breached this year. Healthcare organizations are required to comply with the HIPAA Rules, but with data breaches occurring at the current rate, it suggests either widespread noncompliance or ineffective regulations.

Healthcare breaches not only violate Americans’ privacy and put them at risk of identity theft and fraud; hacking incidents, especially ransomware attacks, cause massive operational disruption that affects the ability of healthcare providers to provide care. All too often, cyberattacks result in cancelled appointments, rescheduled surgeries, and delays to emergency care, which affect patient outcomes.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

An update to the HIPAA Security Rule has been proposed that includes a raft of new security requirements to improve healthcare cybersecurity; however, the proposed rule was heavily criticized by industry groups, health systems, and hospitals. The final rule has been delayed until at least July 2027, although a decision has yet to be made about whether a final rule will be issued. Even if it is, the requirements will not need to be implemented until at least early 2028.

Implementing more robust cybersecurity measures comes at a cost, and that is especially problematic for rural healthcare providers, many of whom are already facing significant financial challenges without having to commit additional funds to improving cybersecurity. Each dollar spent on cybersecurity improvements is a dollar lost to patient care. The relative lack of cybersecurity resources and personnel makes rural and other resource-constrained healthcare providers soft targets for hackers, and cyberattacks that disrupt patient care can result in dangerous delays to healthcare services, as alternative facilities may be hundreds of miles away.

The Rural Hospital Cybersecurity Enhancement Act, a bipartisan bill co-sponsored by Representatives Erin Houchin (R-IN) and Rep. Kim Schrier (D-WA), was introduced to better protect rural healthcare providers against cyber threats by improving the cybersecurity workforce and improving resources.  That includes mandates for the HHS to provide free instructional materials to help rural healthcare providers train existing staff, targeted educational criteria aimed at improving cybersecurity training in rural educational institutions, and a workforce development strategy to expand the rural healthcare IT workforce.

The other key healthcare cybersecurity bill under consideration is the bipartisan Health Care Cybersecurity and Resiliency Act of 2026, which was introduced by Senate Health, Education, Labor & Pensions (HELP) Committee Chair, Sen. Bill Cassidy (R-LA), and co-sponsored by Sens. Mark Warner (D-VA), Maggie Hassan (D-NH), and John Cornyn (R-TX). The aim of the bill is to better protect patient health data, improve coordination between the HHS and the Cybersecurity and Infrastructure Security Agency (CISA), and strengthen overall cybersecurity defenses within the healthcare and public health sector.

At the hearing, the subcommittee heard testimony from Greg Garcia, Executive Director for Cybersecurity at the Healthcare and Public Health Sector Coordinating Council (HSCC) Cybersecurity Working Group, on the state of healthcare cybersecurity and the pending two healthcare cybersecurity bills. Garcia warned that the nation’s rural and resource-constrained healthcare providers are the most vulnerable in the sector and are unprepared to protect against evolving cyber threats and technological innovation, including beneficial and adversarial uses. He called for “a concerted, multi-pronged combination of government programs, assistance and funding with market-based mutual support and community defense.”

Garcia made several recommendations, including workforce training on cybersecurity, especially at rural and low-resourced healthcare providers where it is desperately needed. Garcia said it is essential that grants are made available to allow rural and resource-constrained healthcare providers to make the necessary upgrades to cybersecurity, such as replacing end-of-life medical devices that lack the capacity to be made secure. Garcia also recommended that the HHS official appointed as responsible for coordinating cybersecurity internally and across the sector should be designated at the deputy assistant secretary level or higher, and for that individual to have the authority to influence policy and program decisions.

He advised against implementing regulations that require specific security technologies such as encryption and multifactor authentication, such as the mandatory measures in the proposed update to the HIPAA Security Rule, as it will be far more effective to address risks through evolving industry cybersecurity frameworks. Garcia suggested that the proposed HIPAA Security Rule update should be reset or abandoned, as it “did not demonstrate sufficient insight to the complexities of achieving effective cybersecurity protections for the health sector, nor acknowledge the considerable work the sector and government partners have accomplished in good faith and urgency over the past 6 years to build a collective cyber defense.”

Garcia also requested that HSCC be involved in cybersecurity policy decisions and should be included in threat information sharing and incident response advisories, as it is the primary cross-sector healthcare advisory council focused exclusively on critical infrastructure cybersecurity

The post House Subcommittee on Health Examines Healthcare Cybersecurity Proposals appeared first on The HIPAA Journal.

Genuine insights concerning thepacificspin1.ca and innovative fishing strategies

Posted by William Roberts

Genuine insights concerning thepacificspin1.ca and innovative fishing strategies

thepacificspin1.ca. For those seeking information and resources related to angling and the aquatic world, the digital landscape offers a wealth of options. Among these, stands as a potentially valuable hub for enthusiasts, offering a range of content designed to inform and inspire. Whether you're a seasoned angler or just beginning to explore the joys of fishing, understanding where to find reliable information and quality resources is paramount. The anticipation of a successful catch, the tranquility of being on the water, and the constant learning process are all integral parts of the fishing experience, and platforms like this aim to enhance those aspects.

The modern angler requires more than just a rod and reel; they need access to up-to-date techniques, detailed location insights, and a community to share experiences with. This is where online resources, specifically those focusing on niche geographic areas, can prove incredibly beneficial. A comprehensive website can bridge the gap between seasoned expertise and aspiring anglers, providing a platform for growth and a deeper appreciation for the sport. The evolving nature of conservation efforts and sustainable practices also makes staying informed crucial for responsible angling.

Understanding Pacific Salmon and Their Habitats

Pacific salmon are an iconic species and a cornerstone of the ecosystem in the Pacific Northwest. Understanding their life cycle, migration patterns, and habitat requirements is fundamental for any angler targeting these prized fish. Different species, such as Chinook, Coho, Sockeye, Pink, and Chum salmon, each exhibit unique characteristics and preferences, impacting the strategies employed to catch them. Successful angling often relies on pinpointing where these salmon congregate during their spawning runs or while feeding in saltwater and freshwater environments. Factors like water temperature, flow rates, and the availability of food sources all play a significant role in their distribution and behavior.

The Impact of Environmental Factors

Beyond understanding the salmon themselves, it’s critical to appreciate the influence of environmental factors. Climate change, pollution, and habitat degradation all pose significant threats to salmon populations. Anglers have a responsibility to be aware of these challenges and to support conservation efforts aimed at preserving these vital ecosystems. Responsible angling practices, such as catch and release techniques, and adherence to regulations, become increasingly important in mitigating the impact on vulnerable stocks. Active participation in habitat restoration projects and advocating for sustainable fisheries management are also ways anglers can contribute to the long-term health of salmon populations.

Salmon Species Typical Run Timing Preferred Habitat Common Lures/Baits
Chinook (King) Spring/Summer/Fall Deep pools, saltwater estuaries Spoons, spinners, herring
Coho (Silver) Late Summer/Fall Rivers, streams, nearshore waters Cured shrimp, jigs, spinners
Sockeye (Red) Summer/Fall Lakes, rivers during spawning runs Flies, small spoons
Pink (Humpback) Odd-numbered years (primarily) Inshore waters, rivers Small lures, flies

This table provides a simplified overview, and understanding localized variations in run timings and habitat preferences is crucial for maximizing success. Remember to always consult local fishing reports and regulations.

Essential Fishing Techniques for Pacific Salmon

Mastering various fishing techniques is essential for effectively targeting Pacific salmon. Different methods excel in different conditions and for different species. Trolling, casting, and fly fishing are among the most popular approaches. Trolling involves dragging lures or bait behind a moving boat, covering a larger area and presenting the offering at varying depths. Casting allows for precise placement of lures near structure or feeding lanes. Fly fishing requires specialized equipment and techniques, offering a more intimate and challenging experience. The selection of the appropriate technique is heavily influenced by the target species, water conditions, and angler preference.

Advanced Strategies for Specific Salmon Species

While core techniques remain consistent, subtle adjustments can significantly improve your success rate when targeting specific salmon species. For example, when fishing for Chinook, focusing on deeper water and utilizing larger lures or bait is often effective. Coho salmon, known for their aggressive strikes, respond well to brightly colored lures and faster retrieves. Sockeye salmon require a more delicate approach, often involving light fly fishing gear and precise presentation. Additionally, paying attention to water clarity, current speed, and the presence of baitfish can provide valuable clues as to which techniques are likely to be most productive.

  • Gear Selection: Choosing the right rod, reel and line is critical.
  • Knot Strength: Using reliable knots is paramount to prevent break-offs.
  • Reading the Water: Identifying potential holding areas based on current, structure, and depth.
  • Bait and Lure Presentation: Understanding how to present your offering in a natural and appealing manner.
  • Understanding Regulations: Adhering to local fishing regulations is essential for responsible angling.

Effective angling consistently requires a combination of technical skill, environmental awareness and respect for the resource. Utilizing the information available, like that potentially found on platforms like , can elevate your overall experience.

Understanding Salmon Life Cycles and Spawning Grounds

The complex life cycle of Pacific salmon dictates their distribution and availability throughout the year. From their birth in freshwater streams to their migration to the ocean and eventual return to spawn, each stage presents unique angling opportunities and challenges. Understanding the timing of these life stages is crucial for maximizing your chances of success. Spawning grounds, in particular, often concentrate large numbers of salmon, making them accessible to anglers. However, it’s vital to be aware of regulations protecting spawning fish and to practice responsible angling techniques to minimize disturbance to these vulnerable populations.

Protecting Spawning Habitat

The health of salmon populations is intrinsically linked to the quality of their spawning habitat. Gravel beds, clean water, and adequate stream flow are all essential components of a productive spawning environment. Human activities, such as logging, agriculture, and urbanization, can all negatively impact spawning habitat. Anglers can play a role in protecting these critical areas by supporting conservation organizations, advocating for responsible land management practices, and minimizing their own impact on the environment. Activities like staying on designated trails, avoiding disturbing streambanks, and properly disposing of waste can all contribute to the preservation of spawning habitat.

  1. Research local fishing regulations before each trip.
  2. Utilize appropriate tackle for the target species.
  3. Practice catch and release whenever possible.
  4. Respect the environment and minimize your impact.
  5. Report any suspected illegal fishing activity.

Adhering to these practices can help ensure the sustainability of salmon fisheries for future generations. Responsible angling is not merely about catching fish; it is about preserving the health and vitality of the ecosystem.

The Role of Technology in Modern Salmon Fishing

Advancements in technology have revolutionized the world of salmon fishing, providing anglers with new tools and insights to enhance their success. GPS technology allows for precise mapping of fishing locations and the identification of potential hotspots. Fish finders utilize sonar to detect underwater structures and fish schools. Modern fishing lines and lures are designed with improved sensitivity and durability. Furthermore, online resources and mobile apps provide access to real-time fishing reports, weather forecasts, and tidal information. The integration of technology has significantly improved the efficiency and effectiveness of salmon fishing, but it's important to remember that technology is merely a tool, and skill, knowledge, and respect for the environment remain paramount.

Exploring Promising Fishing Locations in the Pacific Northwest

The Pacific Northwest boasts a diverse array of fishing locations, each offering unique opportunities to target Pacific salmon. The Fraser River in British Columbia is renowned for its prolific salmon runs. The Columbia River, spanning multiple states, provides access to a variety of salmon species. Puget Sound in Washington State offers excellent saltwater salmon fishing opportunities. Coastal rivers and streams throughout Oregon and Northern California also provide prime salmon habitat. Researching specific locations, understanding local regulations, and connecting with experienced guides can greatly enhance your angling experience. Remember that conditions can vary significantly depending on the time of year and recent weather patterns.

The effectiveness of any fishing trip largely depends on careful pre-planning and adaptability. Staying abreast of current conditions, understanding fish behavior, and employing a flexible approach are key factors that contribute to success. Utilizing resources like local tackle shops and online fishing forums, including potentially , can provide valuable insights and connect you with a community of passionate anglers. By combining traditional knowledge with modern techniques and a commitment to responsible angling, you can maximize your enjoyment and contribute to the preservation of this incredible resource.

The post Genuine insights concerning thepacificspin1.ca and innovative fishing strategies appeared first on HIPAA.com.

xHealth Data Breach Affects 118,000 Individuals

Posted by Steve Alder

A data breach at zHealth, a practice management and EHR software provider, has affected 118,000 individuals. Data breaches have also been announced by Bridgeway Benefit Technologies, Longview ER Operations, and HealthStream.

zHealth

zHealth, Inc., a San Francisco, California-based cloud-based practice management and electronic health records (EHR) software provider, has disclosed a cybersecurity incident that may have involved data being acquired by an unauthorized third party. According to the breach notice provided to the California Attorney General, zHealth became aware that certain information may have been copied on or around June 15, 2026. An investigation was launched, which confirmed that its network had been accessed by an unauthorized third party between January 20 and January 21, 2026. The review of the impacted data was completed on September 3, 2026.

The substitute breach notice on the zHealth website states that the impacted information varies from individual to individual and may include names, medical information, and health insurance information. The affected individuals have been offered single-bureau credit monitoring, credit report, and credit score services for 12 months. Data privacy and security policies and procedures have been reviewed and enhanced to prevent similar incidents in the future. The incident is not currently shown on the HHS’ Office for Civil Rights website; however, the Oregon Attorney General has been informed that the data breach affected 118,563 individuals.

Bridgeway Benefit Technologies

Bridgeway Benefit Technologies, a Baltimore, Maryland-headquartered third-party health plan administrator that provides software for managing multiemployer health, welfare, and retirement benefits, has notified the HHS Office for Civil Rights about a breach of the protected health information of 9,268 individuals. The company explained that it experienced a cybersecurity incident involving an employee email account that exposed data provided to the company in connection with the administration services it provides to its clients. The unauthorized activity was identified on May 18, 2026, and the forensic investigation determined that the account was accessed between March 5, 2026, and May 19, 2026.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

Bridgeway Benefit Technologies confirmed that the breach was limited to its own email system. No client systems were compromised in the incident. The exact types of data involved are detailed in the individual notification letters. Attorneys General have been notified that the compromised data includes Social Security numbers. Steps have been taken to improve security to prevent similar incidents in the future, and the affected individuals have been offered complimentary credit monitoring and identity theft protection services.

Longview ER Operations

Longview ER Operations, LLC, doing business as Hospitality Health ER, a full-service emergency room operator with facilities in Longview, Tyler, and Galveston, Texas, has experienced a cybersecurity incident that involved patient data. Suspicious network activity was identified on July 22, 2026. Immediate action was taken to secure its systems, and an investigation was launched to determine the nature and scope of the activity, with assistance provided by third-party cybersecurity professionals.

The investigation confirmed that an unauthorized third party had accessed its network and copied files. The file review is ongoing, and patients will be notified by mail as soon as the review is concluded. The notification letters will explain the types of information involved for each patient. The incident was limited to the Longview network. The facilities in Tyler and Galveston were unaffected. The number of affected individuals has not yet been determined. The incident has been reported to the HHS’ Office for Civil Rights using an estimate of at least 501 individuals. The total will be updated when the review is completed.

HealthStream

HealthStream Inc., a Nashville, Tennessee-based healthcare technology company that provides software and training solutions for the healthcare industry, has notified the Massachusetts Attorney General about a recent security incident. The letter provides no information about the nature of the data breach, other than stating that some “information” was involved and complimentary credit monitoring and identity theft protection services have been offered for 24 months. “Due to requirements imposed by Massachusetts law, we are unable to provide you with the details about the nature of this incident,” states the notification letter.

The notification letters appear to be about a cybersecurity incident reported to the U.S. Securities and Exchange Commission (SEC) on July 29, 2026. According to the Form 8-K filing, the incident involved unauthorized access to corporate file servers and does not appear to have involved protected health information. Data compromised in the incident included employee data, customer and vendor billing data, and legal information. Around 75 of its credentialing customers have been affected. HealthStream said no customer-facing systems were involved, there was no file encryption, operations were not disrupted, and the incident is unlikely to affect its financial position or results.

The post xHealth Data Breach Affects 118,000 Individuals appeared first on The HIPAA Journal.