Explore Resources
Insights, research, and guides on healthcare data security
What a BAA Can and Cannot Do
A business associate agreement tells a vendor how patient data must be protected. It does not technically enforce those requirements on the data itself. Here is what HIPAA requires a BAA to include, and how record-level encryption turns those contractual restrictions into cryptographic enforcement.
AI is expanding healthcare's attack surface. This white paper explains why perimeter-based security no longer holds, why a verifiable chain of custody is a prerequisite for deploying AI, and how record-level encryption with zero-knowledge key management keeps patient data protected wherever it is stored, accessed, or shared.
42 Breaches in 45 Days
AI-powered cyberattacks are industrializing. In the first 45 days of 2026, 42 healthcare breaches were reported to HHS. Here is what has to change.
The Breach Heard Around the World
Why CFOs, not just CISOs, are now driving healthcare cybersecurity strategy after the Change Healthcare breach exposed the financial reality of cyber risk.