[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIdg-yIMnZiqw4-c3oTqlsynvxB_HUpLvMdh19K6DQ8c":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"d4bb6787-8a9f-4d29-973b-b4ebcb441cda","280,000 Impacted by Premier Medical Group Data Breach","280-000-impacted-by-premier-medical-group-data-breach-72ea86","In June 2026, hackers accessed files containing patients’ names, contact information, diagnosis details, and health insurance information. The post 280,000 Impacted by Premier Medical Group Data Breach appeared first on SecurityWeek.","Premier Medical Group (PMG), a New York-based healthcare provider, has disclosed a data breach affecting 282,075 patients. The incident, which occurred in June 2026, saw attackers access files containing sensitive patient information including names, contact details, medical history, and insurance data. PMG has notified the US Department of Health and Human Services and is advising affected patients to monitor their statements for any suspicious activity.","Premier Medical Group reports data breach impacting over 280,000 patients.","https:\u002F\u002Fwww.securityweek.com\u002F280000-impacted-by-premier-medical-group-data-breach\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F07\u002Fdata-breach-healthcare-medical.jpg","2026-09-16T10:47:18+00:00","2026-09-16T12:00:22.315627+00:00",7,[17,20],{"name":18,"type":19},"Premier Medical Group","vendor",{"name":21,"type":22},"HIPAA","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",[],[18,21],{"controls":44,"vendors":132},[45,74,103],{"slug":46,"name":47,"problem":48,"products":49},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"slug":75,"name":76,"problem":77,"products":78},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"slug":104,"name":105,"problem":106,"products":107},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[],{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":150},"healthcare-provider-exposes-280k-patient-records-in-june-2026-breach","Healthcare Provider Exposes 280K Patient Records in June 2026 Breach","Premier Medical Group suffered a breach in which attackers gained unauthorized access to files containing highly sensitive patient data, including medical histories and insurance information. Healthcare organizations are high-value targets because they store a combination of personally identifiable information (PII) and protected health information (PHI), making stolen records extremely valuable on criminal markets. The fact that PMG is only now notifying patients and regulators suggests a potentially delayed detection and response timeline, which can worsen harm to affected individuals. This incident underscores that strong access controls, encryption at rest, and rapid detection capabilities are non-negotiable in healthcare environments where HIPAA obligations are strict and patient trust is paramount.",[138,139,140,141,142,143,144,145,146,147,148,149],"HIPAA Security Rule 45 CFR §164.312 – Technical Safeguards","HIPAA Breach Notification Rule 45 CFR §164.400–414","NIST SP 800-66 Rev. 2 – Implementing HIPAA Security Rule","NIST CSF PR.AC-3 – Remote Access Management","NIST CSF PR.DS-1 – Data-at-Rest Protection","NIST CSF DE.AE-3 – Event Detection Aggregation","CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 IR-6 – Incident Reporting","NIST SP 800-53 SC-28 – Protection of Information at Rest",{}]