HIPAA Digest | Catapult Business Innovations – December 11, 2025

MedStar Health Data Breach Exposes Sensitive PII and PHI

The breach at MedStar Health exposed sensitive personal information and protected health information, illustrating how even large healthcare organizations can be targets for data leakage. For business leaders, this underscores the importance of strong data governance, incident response planning, and third-party risk management when your marketing or AI tools touch PHI or PII.

Read full article

HMSA Email Breach Exposes PII & PHI

The HMSA email breach exposed personally identifiable information and health data, showing how data can be exposed via compromised email channels. For business owners and marketers, this reinforces the need for strong encryption, access controls, phishing awareness, and clear data-handling policies when using AI-driven campaigns or storing customer data.

Read full article

AHA: Understand Your Risk Environment to Better Protect Patient Data

The HIPAA Journal piece explains how understanding and managing your risk environment helps protect patient data and reduce breaches. For business decision-makers, it offers practical steps to build a risk-aware program and to evaluate vendors and AI tools that handle PHI/PII.

Read full article

Data Breaches Announced by North Atlantic States Carpenters Health Benefits Fund & Millcreek Pediatrics

The HIPAA Journal reports data breaches impacting multiple providers and health plans, underscoring the breadth of PHI/PII exposure and the compliance steps required for breach notification and security controls. For business leaders, this highlights the importance of breach response planning and robust security across data partners and marketing ecosystems.

Read full article

Davies, McFarland & Carroll; Awakenings Center Data Breaches Impact 72,500 Individuals

A large-scale data breach affecting 72,500 individuals demonstrates the significant risk of PHI/PII exposure across institutions. For business leaders, this reinforces the need for comprehensive security monitoring, vendor risk management, and rapid incident response planning when your data partners or marketing platforms handle sensitive information.

Read full article