Loading story…
The U.S. Department of Health and Human Services has announced a $50 billion grant program over five years to support rural healthcare, including IT and cybersecurity investments. The funding, part of the 'Big Beautiful' bill, aims to address technology, workforce, and care delivery challenges but may not fully offset projected Medicaid cuts to rural providers. Experts highlight the need for sustainable, collaborative approaches to maximize the impact of these grants.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The U.S. Senate Health, Education, and Labor (HELP) Committee advanced the bipartisan **Health Care Cybersecurity and Resiliency Act**, legislation aimed at revamping cybersecurity practices at the Department of Health and Human Services (**HHS**). The bill would require the HHS Secretary to develop a comprehensive **cybersecurity incident response plan** and submit it to Congress for review, and it would direct HHS to coordinate with **CISA** on oversight of cybersecurity across the public health and healthcare sectors. Additional provisions include developing cybersecurity guidance for **rural healthcare providers** and initiatives to improve **cybersecurity literacy** across the healthcare workforce. Lawmakers cited the **2024 Change Healthcare** incident as a key catalyst, arguing it demonstrated the sector’s exposure to ransomware and other cyber threats and the systemic risk created by concentrated third-party dependencies. The measure would also designate HHS’ *Administration for Strategic Preparedness and Response* (**ASPR**) as the **Sector Risk Management Agency** for the Healthcare and Public Health sectors. CyberScoop reported the bill passed committee on a **22–1** vote, with Sen. Rand Paul as the lone dissenter, and sponsors including Sen. Bill Cassidy along with Sens. Maggie Hassan, Mark Warner, and John Cornyn.
Jun 29, 2026
The House Energy and Commerce Subcommittee on Health examined the **Healthcare Cybersecurity and Resiliency Act of 2026** and the **Rural Hospital Cybersecurity Enhancement Act** as healthcare breaches remain elevated. By August 30, 496 large breaches had been reported to HHS OCR, exposing more than 74.6 million individuals’ protected health information; hacking and other IT incidents accounted for 426 of those incidents. The bills seek to improve healthcare cyber workforce capacity, funding, federal coordination, patient-data protection, and operational resilience, particularly for rural and resource-constrained providers. Healthcare and Public Health Sector Coordinating Council Cybersecurity Working Group Executive Director Greg Garcia endorsed the legislation with revisions, urging grants, training, community support, safe-harbor protections, and funding to replace unsecurable end-of-life medical devices. He also called for stronger HHS cybersecurity leadership and formal HSCC participation in HHS and CISA policy, threat-sharing, and incident-response efforts. Garcia opposed legislatively prescribed controls, including specific MFA and encryption requirements, and recommended a risk-based framework rather than the proposed prescriptive HIPAA Security Rule update.
Sep 16, 2026
The conclusion of the longest federal government shutdown in US history has led to significant operational challenges for federal agencies, particularly the Department of Health and Human Services (HHS). The shutdown has exacerbated existing strains at HHS, raising concerns about the Office for Civil Rights' capacity to enforce HIPAA and data privacy regulations due to prior restructuring and workforce reductions. Hospitals and healthcare systems are also facing increased pressure, with ongoing ransomware threats and reduced federal support compounding the situation. Additionally, the shutdown's end coincided with notable developments in the cybersecurity sector, including a major funding milestone for an AI-driven security startup, signaling a shift toward autonomous security solutions in the enterprise. As part of the deal to reopen the government, lawmakers reauthorized the State and Local Cybersecurity Grant Program, which had expired in September. This $1 billion program, initially funded by the 2021 infrastructure law, is highly valued by state and local governments for bolstering their cyber defenses. While the reauthorization was included in the continuing resolution that ended the shutdown, the long-term funding for the program remains uncertain, with legislation to extend it for another decade still pending in Congress. State technology leaders have welcomed the move, emphasizing the importance of sustained federal support for local cybersecurity initiatives.
Jun 29, 2026