Cybersecurity incident disclosure
Healthcare and Life Sciences organizations face overlapping cybersecurity incident disclosure obligations from the U.S. Department of Health and Human Services Office for Civil Rights, the U.S. Securities and Exchange Commission, and the Cybersecurity and Infrastructure Security Agency, each operating on different timelines and breach thresholds. The SEC's 2023 cybersecurity disclosure rules require public companies to report material incidents within four business days on Form 8-K, a standard that sits in direct tension with HHS OCR's 60-day HIPAA breach notification window. Compliance teams in this sector are currently working through which incidents trigger both regimes simultaneously and how to draft disclosures that satisfy each agency without creating contradictions in the public record.
Watch
- HHS OCR enforcement posture on ransomware incidents classified as presumptive HIPAA breaches
- SEC Form 8-K Item 1.05 materiality determinations for healthcare data incidents
- CISA's 72-hour reporting mandate under CIRCIA as final rulemaking advances
- Dual-disclosure conflicts when a breach is material to investors but sub-threshold under HIPAA
Recent material activity in Healthcare & Life Sciences
A selection of recent published briefs; this is not a complete archive.
Health Canada monitors Sanofi-Aventis Canada recall of 1,043 insulin units across approximately 80 distribution points
Sanofi-Aventis Canada Inc. voluntarily recalled 1,043 insulin pen and cartridge units on September 25, 2026, after identifying a risk that affected stock may have frozen during shipping. The recall covers multiple lots d…
Read a full sample brief →FDA advises consumers against Miracle Power of King Kong Honey over undisclosed active pharmaceutical ingredient
The FDA issued a consumer safety advisory on September 25, 2026 warning against purchasing or using Miracle Power of King Kong Honey, a sexual enhancement product sold online and potentially in retail stores. The advisor…
Read a full sample brief →FDA advises consumers against Candy Power For Man sexual enhancement product containing undisclosed ingredient
The FDA issued a consumer safety advisory on September 25, 2026 warning against purchasing or using Candy Power For Man, a sexual enhancement product sold on websites including eBay and potentially in retail stores. The …
Read a full sample brief →FDA advises consumers against purchasing Vital Honey over undisclosed drug ingredient
On September 25, 2026, the FDA advised consumers not to purchase or use Vital Honey, a sexual enhancement product sold on multiple websites and potentially in retail stores. The product contains an undisclosed drug ingre…
Read a full sample brief →Health Canada recalls nine Sarclisa vials from Nova Scotia over potential freeze damage during shipment
Health Canada issued a Type I recall on September 25, 2026, covering nine units of Sarclisa (isatuximab, 500 mg/25 mL, Lot 5F028A) distributed to three locations in Nova Scotia. Sanofi-aventis Canada Inc. initiated the r…
Read a full sample brief →FDA classifies Boston Scientific Imager II Angiographic Catheter removal as Class I Recall over tip detachment risk
The FDA classified the Boston Scientific Imager II Angiographic Catheter removal as a Class I Recall on September 25, 2026 — its most serious designation. The affected catheters were manufactured with reduced stabilizing…
Read a full sample brief →FDA approves zilurgisertib as third treatment for fibrodysplasia ossificans progressiva in patients aged 12 and older
FDA approved Atebrioz (zilurgisertib) tablets on September 25, 2026 for adults and pediatric patients aged 12 and older with fibrodysplasia ossificans progressiva. The approval targets reduction in total new heterotopic …
Read a full sample brief →FDA approves obinutuzumab for relapse prevention in idiopathic nephrotic syndrome patients aged 2 and older
FDA approved Gazyva (obinutuzumab) injection on September 25, 2026 for frequently relapsing or steroid-dependent, childhood-onset idiopathic nephrotic syndrome in patients 2 years and older who are in remission. This mar…
Read a full sample brief →Health Canada recalls Ethicon PERMA-HAND Silk Suture over unauthorized chemical contamination in primary packaging
Health Canada recalled Ethicon PERMA-HAND Silk Suture on September 25, 2026, after the manufacturer confirmed that affected lots were incorrectly packaged with a tubing fluid — containing isopropyl alcohol, diethylaminoe…
Read a full sample brief →Abbott updates Amulet Left Atrial Appendage Occluder IFU to address pulmonary artery injury risk
Health Canada published a safety communication on September 25, 2026 regarding Abbott's Amplatzer Amulet Left Atrial Appendage Occluder. Abbott is revising the device's instructions for use to explicitly identify the pul…
Read a full sample brief →