Security firm Solar says Belarusian Cyber Partisans were inside an unnamed Russian healthcare network from early 2024 until its discovery in December 2025. That network connects to numerous other providers, and Solar says the foothold gave the intruders a possible route into them.
Reality
- Evidence35
- Adoption
- Insufficient
- Hype gap+10
- Incentives55
- Confidence40
Senators passed the Health Care Cybersecurity and Resilience Act by unanimous consent after the 2024 version died with its term. If the House agrees, healthcare's security rules get updated, with federal grants and training attached.
Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+15
- Incentives55
- Confidence50
Epic has stopped most product development for roughly six weeks while it fixes MyChart flaws that an AI model uncovered, according to TechCrunch. No list of affected portal setups is public yet, so hospitals cannot check theirs against one.
Perspective Coverage
3 publishers
- Builder
- Builder 30%
- Operator
- Operator 57%
- Investor
- Investor 13%
Reality
- Evidence55
- Adoption25
- Hype gap+15
- Incentives40
- Confidence60
The updated CISA-FBI advisory puts Medusa at more than 500 victims as of April 2026, up from 300, with exploits weaponized within 24 hours and sometimes a week before disclosure.
Perspective Coverage
7 publishers
- Builder
- Builder 12%
- Operator
- Operator 79%
- Investor
- Investor 9%
Reality
- Evidence76
- Adoption
- Insufficient
- Hype gap+20
- Incentives40
- Confidence74
The Toronto hospital says the flaw sits in software used by other organizations too. It has not said which software, which leaves those organizations nothing to act on.
Publishers:bleepingcomputer.com · sickkids.ca · therecord.media · toronto.citynews.ca Perspective Coverage
4 publishers
- Builder
- Builder 15%
- Operator
- Operator 73%
- Investor
- Investor 12%
Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+5
- Incentives60
- Confidence60
The distributor found the intrusion on August 25, 2026, the same day ShinyHunters says its four-day exfiltration ended. It has not named the vendor applications involved, so customers are left scoping their own integrations.
Perspective Coverage
9 publishers
- Builder
- Builder 17%
- Operator
- Operator 66%
- Investor
- Investor 17%
Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+40
- Incentives70
- Confidence55
Three flaws in NextGen Healthcare Mirth Connect 4.7.1 and earlier share a single fix in version 4.7.2. The one that changes blast radius lets an authenticated user read the engine's stored credentials for connected systems.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap−18
- Incentives32
- Confidence66
The money leaves by card and not by password, which puts this portal impersonation wave in the hands of hospital comms teams that neither wrote the software nor control the sender addresses. Epic's answer is the guidance it already published.
Reality
- Evidence62
- Adoption45
- Hype gap+18
- Incentives45
- Confidence58