HIPAA compliance, simplifiedUpdated today

HIPAA compliance for your practice, handled.

Built for healthcare organizations that need real answers, not legal jargon. Get instant HIPAA guidance, generate compliant documents in minutes, track enforcement actions, and train your staff, all in one place.

Ask a HIPAA question Browse insights

Designed for 6M+ HIPAA-covered entities
Updated daily from OCR & HHS
100% client audit pass rate

Everything in one place

New to HIPAA?

Not sure where to start? We've got you.

Plain English HIPAA guidance for every role at your organization. No prior compliance experience needed.

Explore HIPAA Basics →

I'm front desk staff →I'm a practice manager →I'm a healthcare provider →I'm a software vendor →

Regulations Monitored: 14,800+
OCR Penalties Catalogued: $134M
Updates This Quarter: 847
HIPAA-Covered Entities: 6M+

223 enforcement actions tracked · $120.8M in total penalties · Updated weekly

Open Enforcement Hub

Latest insights

What you need to know this week

Browse insights View all enforcement actions →

Data Breach

Medical Data Rx Breach: The Gentlemen/VYPR Ransomware Group Claims Attack on Michigan Healthcare IT Vendor; Class Action Investigation Launched

The Gentlemen/VYPR ransomware group has claimed an attack on Medical Data Rx, a Michigan-based healthcare IT and technology services company. A national class action law firm launched an investigation on October 16, 2026, on behalf of potentially affected individuals. Scope and victim count remain unconfirmed.

Oct 17, 2026·6 min read

Read item

Data Breach

Mid Florida Dermatology & Plastic Surgery Discloses Breach Affecting 85,585 Patients; Kannarr Eye Care and Indiana University Health Also Report Incidents

A central Florida dermatology group with 33 locations has notified HHS of a breach affecting more than 85,000 patients after detecting unusual computer system activity in March 2026. Two other covered entities reported incidents concurrently.

Oct 17, 2026·5 min read

Read item

Data Breach

Central Ohio Primary Care Physicians Discloses Vishing-Triggered Breach Affecting 1.4 Million Patients and Employees; 'Chaos' Ransomware Group Implicated

A voice phishing attack at Central Ohio Primary Care Physicians exposed protected health information for roughly 1.4 million individuals. Here is what compliance officers need to know about the breach, the data involved, and HIPAA obligations.

Oct 16, 2026·6 min read

Read item

Data Breach

Ivanti Connect Secure Zero-Day Exploited in Active Attacks Targeting Healthcare VPN Infrastructure

A high-severity authentication bypass zero-day in Ivanti Connect Secure is being actively exploited, giving unauthenticated attackers a direct path to ePHI. Here is what HIPAA-covered entities and business associates need to do right now.

Oct 14, 2026·6 min read

Read item

Browse insights View all enforcement actions →

Compliance Tools