Healthcare Vendors Expose Patient Data

The story broadens from a mostly healthcare-breach cluster into a slightly wider set of third-party data incidents, now explicitly including non-healthcare outliers. It also adds more specific actors and clarifies that many incidents involved data exfiltration and delayed mid-2026 disclosures after 2025 intrusions.

The story narrows into a more clearly healthcare-centered breach pattern, with newly named vendors and regulators showing repeated exposure of patient data across billing, laboratory, and practice-management systems. It also clarifies that the Origin Energy incident is separate, rather than part of the main healthcare cluster.