All posts
Topic · 5 articles
Breach Notification: articles and guides
5 PlayCISO articles on breach notification, newest first. The most recent is “Medtronic Data Breach: 3.8M Notified, What to Do”.
Medtronic Data Breach: 3.8M Notified, What to Do
Medtronic says an unauthorized party accessed corporate IT systems in April 2026. 3,834,294 notified; ShinyHunters claimed 9M. Confirmed vs claimed.
November 9, 2026
Data Breach Response Plan: Scope, Preserve, Assess, Notify
A practical data breach response plan: preserve the evidence, record when you became aware, count people rather than rows, assess the harm, and meet the notification clocks under GDPR, Australia’s NDB scheme, SEC rules, HIPAA and US state laws.
October 29, 2026
What Is HIPAA Compliance? Rules, Violations and Penalties
HIPAA compliance means following the Privacy, Security and Breach Notification Rules. Who must comply, what counts as a violation, penalty tiers.
October 23, 2026
What Is the HITECH Act? How It Strengthened HIPAA
A plain-English explainer on the HITECH Act: how it promoted electronic health records, created the Breach Notification Rule, increased HIPAA enforcement and penalties, and — through the HIPAA Omnibus Rule — made business associates directly liable. General information, not legal advice.
October 23, 2026
The Suno Breach: An npm Worm and a Scraped Training Set
A hacker used the self-propagating Shai-Hulud npm worm to breach AI music company Suno, leaking source code that details how its training corpus was scraped — plus customer emails, phone numbers, and Stripe data. Here is what actually happened and what security leaders should take from it.
July 16, 2026