Healthcare breach trends and HIPAA enforcement priorities amid rising ransomware and third‑party risk

Reporting on healthcare security trends indicates breach incidents increased sharply between 2024 and 2025, even as the total number of compromised patient records declined, suggesting attackers are increasingly prioritizing operational disruption over mass data theft. Drivers cited include ransomware, third‑party/vendor exposure, and expanding “shadow AI” usage; the same reporting highlights low confidence in vendor risk assessments and in rapid detection/containment/recovery capabilities, reinforcing the need for improved visibility across overlapping technology stacks and more resilient security programs.

Separately, the U.S. HHS Office for Civil Rights (OCR) stated it will continue HIPAA privacy/security enforcement despite federal office closures, and outlined 2026 priorities that include: continuing the HIPAA Right of Access initiative, expanding Security Rule risk analysis work into risk management, and emphasizing enforcement actions tied to hacking and ransomware (described as the leading driver of large breaches reported to OCR). OCR also noted preparation for a new enforcement program related to confidentiality of substance use disorder treatment records under 42 C.F.R. Part 2, with breach reports and complaints expected to begin in February 2026.