Healthcare IT
Claude Code, Codex, Gemini CLI, Kiro, Grok: HIPAA BAA in July 2026
Five coding tools, five different answers on HIPAA BAA coverage — with conditions that matter and vendor language that changed within the past month.
HIPAA
Healthcare IT
DentaQuest Breach: 15 Million Notified, 2.6 Million Leaked
DentaQuest is notifying more than 15 million people after a three-day intrusion in May. The dataset ShinyHunters published covers 2.6 million.
Healthcare IT
HIPAA Security Rule Update Likely to Miss Its May 2026 Target
OCR's May 2026 target for finalizing the HIPAA Security Rule update is on track to slip — but the agency is enforcing the existing rule aggressively. Here's where the proposed rule stands, what OCR is actually doing today, and what healthcare organizations need to have in place either way.
Healthcare IT
Claude Code, Codex, Gemini CLI: BAA Coverage for Healthcare
Two of the three frontier-model coding CLIs are explicitly carved out of their vendor's HIPAA BAA, even when bundled into Enterprise seats. Here's what's actually buyable for healthcare today, what it costs at twenty-five seats, and why an individual Max plan plus AWS Bedrock might out-economize all three Enterprise tiers.
Healthcare IT
Enterprise AI Plans Are Harder to Get Than You'd Think
Two months into pricing a small Enterprise AI plan with a HIPAA BAA, one vendor has answered cleanly, one has answered with meetings, and one hasn't answered at all.
Technology
Cloud Apps Are Not Deploy-and-Forget
Today's fifteen-minute Node 24 upgrade is a reminder that cloud applications carry a maintenance calendar whether you planned for one or not.
Healthcare IT
Your Health Data Is Not as Private as You Think
HIPAA protects less than most people assume. Outside its reach, data brokers sell mental health records for pennies, pharmacies hand prescriptions to police without warrants, and one company's erroneous report can cost you a life insurance policy.
Healthcare IT
Meta's AI Glasses Have a Healthcare Problem
Meta's AI glasses are impressive consumer devices. They're also architecturally incompatible with any environment where patient data is accessible.
Healthcare IT
The HIPAA Security Rule Is Getting Its Biggest Overhaul in 13 Years
HHS is finalizing sweeping changes to the HIPAA Security Rule that eliminate the 'addressable' loophole and mandate encryption, MFA, and 72-hour recovery. Here's what healthcare IT leaders should be watching.