Technology

Covenant Health data breach affects nearly 500,000 patients

Published

2 months ago

January 11, 2026

Covenant Health data breach affects nearly 500,000 patients

NEWYou can now listen to Fox News articles!

When a healthcare data breach is first disclosed, the number of people affected is often far lower than the final tally. That figure frequently climbs as investigations continue.

That’s exactly what happened with Andover, Massachusetts-based Covenant Health. The Catholic healthcare provider has confirmed a cyberattack discovered last May may have affected nearly 500,000 patients, a sharp increase from the fewer than 8,000 people it initially reported earlier this year.

A ransomware group later claimed responsibility for the incident, though Covenant Health has not publicly confirmed the use of ransomware. The attackers accessed names, addresses, Social Security numbers and health information, among other sensitive data that could put patients at serious risk.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

UNIVERSITY OF PHOENIX DATA BREACH HITS 3.5M PEOPLE

Covenant Health detected suspicious activity in late May 2025, but investigators later confirmed attackers had already accessed systems days earlier. (Kurt “CyberGuy” Knutsson)

What happened in the Covenant Health breach

Covenant Health says it detected unusual activity in its IT environment May 26, 2025. A later investigation revealed that an attacker had actually gained access eight days earlier, on May 18, and was able to access patient data during that window.

In July, Covenant Health told regulators that the breach affected 7,864 individuals. After completing what it describes as extensive data analysis, the organization now says that up to 478,188 individuals may have been affected.

Covenant Health operates hospitals, nursing and rehabilitation centers, assisted living residences and elder care organizations across New England and parts of Pennsylvania. That wide footprint means the breach potentially touched patients across multiple states and care settings.

In late June, the Qilin ransomware group claimed responsibility for the attack, Bleeping Computer reported. The group alleged it stole 852 GB of data, totaling nearly 1.35 million files. Covenant Health has not confirmed those figures, but it did acknowledge that patient information was accessed.

According to the organization, the exposed data may have included names, addresses, dates of birth, medical record numbers, Social Security numbers, health insurance details and treatment information such as diagnoses, dates of treatment and types of care received.

700CREDIT DATA BREACH EXPOSES SSNS OF 5.8M CONSUMERS

Qilin ransomware lists Covenant Health on its data leak site. (Bleeping Computer)

What Covenant Health is telling patients

In a notice sent to regulators and patients, Covenant Health says it engaged third-party forensic specialists to investigate the incident and determine what data was involved. The organization says its data analysis is ongoing as it continues identifying individuals whose information may have been involved.

Then there are the familiar statements every company makes after a breach, claiming they’ve strengthened the security of their IT systems to help prevent similar incidents in the future. Covenant Health says it has also set up a dedicated toll-free call center to handle questions related to the breach.

Beginning Dec. 31, 2025, the organization started mailing notification letters to patients whose information may have been compromised. For individuals whose Social Security numbers may have been involved, Covenant Health is offering complimentary credit monitoring and identity theft protection services.

We reached out to Covenant Health, and the company confirmed the expanded scope of the incident and outlined steps being taken to notify patients and enhance security safeguards.

DATA BREACH EXPOSES 400K BANK CUSTOMERS’ INFO

The breach exposed highly sensitive information, including names, Social Security numbers, medical records and treatment details tied to nearly half a million patients. (Kurt “CyberGuy” Knutsson)

7 steps you can take to protect yourself after the Covenant Health breach

If you received a notice from Covenant Health, or if your data has been exposed in any healthcare breach, these steps can help reduce the risk of misuse.

1) Enroll in the free identity protection offered

If the organization offers you credit monitoring or identity protection, take it. These services can alert you to suspicious activity tied to your Social Security number, credit file or identity details before real damage is done. If you’re not offered one and want to be on the safer side, you might consider getting one yourself.

Identity theft companies can monitor personal information like your Social Security number, phone number and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com

2) Monitor medical and insurance statements closely

Medical identity theft often shows up quietly. Review an explanation of benefits (EOBs), insurance claims and billing statements for services you don’t recognize. If something looks off, report it to your insurer immediately.

3) Place a fraud alert or credit freeze

A fraud alert tells lenders to take extra steps to verify your identity before approving credit. A credit freeze goes further by blocking new accounts entirely unless you lift it. If Social Security numbers were exposed, a freeze is usually the safer option.

To learn more about how to do this, go to Cyberguy.com and search “How to freeze your credit.”

4) Use a password manager

Healthcare breaches often lead to credential-stuffing attacks elsewhere. A password manager ensures every account uses a unique password, so one exposed dataset can’t unlock everything else. It also makes it easier to update passwords quickly after a breach.

Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com.

5) Be cautious of phishing scams and use strong antivirus software

Breaches are frequently followed by phishing emails, texts or calls that reference the incident to sound legitimate. Attackers may pose as the healthcare provider, an insurer or a credit bureau. Don’t click links or share information unless you verify the source independently.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

6) Consider a personal data removal service

Once your data leaks, it often spreads across data broker sites. Personal data removal services help reduce your digital footprint by requesting takedowns from these databases. While they can’t erase everything, they lower your exposure and make targeted fraud harder.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

7) Review your credit reports regularly

You’re entitled to free credit reports from all major bureaus. Check them for unfamiliar accounts, hard inquiries or address changes. Catching fraud early makes it far easier to contain.

Kurt’s key takeaway

Healthcare organizations remain prime targets for cybercriminal groups because of the volume and sensitivity of the data they store. Medical records contain a mix of personal, financial and health information that is difficult to change once exposed. Unlike a password, you cannot reset a diagnosis or treatment history. This breach also shows how early disclosures often underestimate impact. Large healthcare networks rely on complex systems and third-party vendors, which can slow forensic analysis in the early stages. As investigations continue, the number of affected individuals often climbs.

Do you think healthcare organizations do enough to protect user data? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Kurt “CyberGuy” Knutsson is an award-winning tech journalist who has a deep love of technology, gear and gadgets that make life better with his contributions for Fox News & FOX Business beginning mornings on “FOX & Friends.” Got a tech question? Get Kurt’s free CyberGuy Newsletter, share your voice, a story idea or comment at CyberGuy.com.

Click to comment

Technology

Sotomayor’s Wabi Sabi is the funnest record of 2026

Published

8 hours ago

March 15, 2026

Press Room

Sotomayor’s Wabi Sabi is the funnest record of 2026

Shout out to subscriber N_Gorski for today’s pick. They popped into the comments on last week’s recommendation to ask what I thought of the new Sotomayor record. Well, I hadn’t actually heard it yet, but now I’m obsessed.

The group consists of siblings Raul and Paulina Sotomayor from Mexico City. Wabi Sabi is their first record since 2020’s Origenes, and it is pure joy. You can look back through everything I’ve recommended over the last several months, and “fun” is not how you’d describe most of it. But that’s what Wabi Sabi is — it’s fun, chaotic, and dancey as hell.

I was only familiar with Sotomayor before this because of a short documentary about Raul’s various projects made by Ableton. In that video, he discusses how his approach to making music has changed over the years. How he used to try to make things sound “proper” and “clean,” but now it’s about “how much can we distort it” or “how much can we stretch it.”

You can certainly hear that in the music. The first track, “Me dejo llevar,” opens with a synth arpeggio that has clearly been timestretched to within an inch of its life. It’s loaded with digital artifacts. The whole track has a light crust, as if everything is clipping just ever so slightly. “Who’s there” similarly bristles as the edges, sounding like a dance floor constantly on the verge of erupting into a riot.

The vintage electronic drum hits, droning bass, and reverb-drenched noise stabs never reach full catharsis, but simmer beautifully into album highlight “Vida.” Here, Paulina finds a sultry gear as she croons over a UK garage-inflected track that eventually erupts into an afrohouse club banger.

Wabi Sabi ricochets between genres with infectious abandon. Afrobeat, cumbia, electro pop, R&B, and more all collide in what is easily the most fun album of 2026 so far. What makes it all the more impressive is that, for all its unconventional sounds (a donkey jaw?) and stylistic excursions, Sotomayor still has a distinct vision that holds the record together.

At no point does the chaos threaten to overwhelm. Never does it feel like the duo are simply throwing things at the wall to see what sticks; everything is a carefully made decision in service of the party. The gently meandering guitar of “Yo se todo de ti,” the classic house of “Todo se derrumba,” and the dancehall of “Prende la palma” all feel unified by Paulina’s undeniable charisma on the mic and Raul’s uninhibited sonic curiosity.

Technology

Smart glasses detector app warns if you’re being recorded

Published

8 hours ago

March 15, 2026

Press Room

Smart glasses detector app warns if you’re being recorded

NEWYou can now listen to Fox News articles!

Smart glasses are built to blend in. Most of the time, they look just like a normal pair of glasses. The difference is that some models can quietly take photos or record video without anyone nearby realizing it.

As these wearable cameras start showing up in everyday places, more people are wondering when they might be on camera. That concern helped inspire a new Android app called Nearby Glasses, which lets you check whether smart glasses may be nearby.

The idea behind the app is simple. If a nearby device is broadcasting a Bluetooth signal linked to smart glasses, the app tries to detect it. For people worried about hidden cameras in public spaces, even a small warning could help them stay more aware of their surroundings.

META SMART GLASSES PRIVACY CONCERNS GROW

Mark Zuckerberg sported a pair of Meta Ray-Ban Display AI glasses while speaking at the Meta Connect event in Menlo Park, California, on Sept. 17, 2025. (David Paul Morris/Bloomberg via Getty Images)

Why smart glasses are raising privacy concerns

Smart glasses are designed to blend in. Unlike a phone or camera, they often look identical to regular eyewear. That means someone could be filming without anyone around them realizing it.

Modern versions of these devices can capture photos, record video and even livestream. Some models also connect to AI tools that can analyze what the wearer sees. Privacy advocates say the biggest problem is visibility. When someone pulls out a phone to record, people usually notice.

With smart glasses, the camera may be hidden in plain sight. As a result, conversations about consent and privacy are becoming more urgent as wearable cameras spread.

How the nearby glasses app works

Nearby Glasses works by scanning for Bluetooth signals that devices broadcast to connect with phones and other hardware. Each manufacturer uses unique Bluetooth identifiers. The app listens for those signals and compares them to known identifiers from companies that produce wearable devices. If the app detects one of those signals, it alerts the user.

Here is how the process works:

The app scans nearby Bluetooth devices in real time
It checks each signal against known manufacturer identifiers
If a match appears, the user receives an alert

The app currently focuses on devices made by companies such as Meta and Snap. Users can also add additional Bluetooth identifiers to expand what the app detects. That allows the tool to flag more types of wearable tech. To keep scanning continuously, users must enable a foreground service in the app and press Start Scanning. A debug log then displays the scanning activity while the app runs.

Why the developer created the app

The app was developed by software creator Yves Jeanrenaud, who says he built it after seeing how wearable cameras were being used. On the project page, Jeanrenaud described smart glasses as a major privacy concern. He believes the devices could open the door to more recording without consent.

He also pointed to reports about smart glasses appearing in sensitive situations. Those examples include cases where wearable cameras were allegedly used during immigration enforcement or in situations where people were filmed without permission.

According to Jeanrenaud, the app represents what he calls a form of technological resistance. In other words, using technology to push back against technology. Still, even he admits it may only address part of the problem.

As smart glasses become more common in public places, tools like the Nearby Glasses app aim to help people stay aware of possible hidden recording devices. (Kurt “CyberGuy” Knutsson)

The app is helpful but not perfect

Like any detection tool, Nearby Glasses has limitations. Bluetooth signals do not always reveal exactly what device is nearby. For example, a device made by the same manufacturer could trigger an alert. That means a headset or other gadget might appear as a possible pair of smart glasses.

False positives are possible. However, those alerts still give users more awareness of nearby devices that could be capturing data. Right now, the app is available only for Android. The developer has said an iPhone version could happen in the future, depending on time and demand.

Ways to stay safe around smart glasses

Smart glasses are becoming more common. While tools like Nearby Glasses can help, awareness is still the best defense. Here are several ways to protect your privacy.

Pay attention to visible camera indicators

Some smart glasses include small LED lights that turn on while recording. If you notice a light on someone’s frames, they may be filming.

Speak up if you feel uncomfortable

If you suspect someone is recording you in a private setting, you can ask them directly. Many people stop when confronted.

Avoid sensitive conversations in crowded areas

Wearable cameras thrive in public environments where people are distracted. Avoid discussing personal information in places where recording could occur.

Disable Bluetooth visibility on your own devices

Limiting the signals your devices broadcast can reduce how easily others track or scan your hardware.

WORLD’S THINNEST AI GLASSES FEATURE BUILT-IN AI ASSISTANT

Stay informed about wearable tech

Smart glasses are evolving quickly. Learning how they work helps you recognize when someone might be using one nearby.

Mark Zuckerberg wears the Meta Ray-Ban Display glasses while speaking at the company’s headquarters in Menlo Park, California, on Sept. 17, 2025. (Reuters/Carlos Barria)

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.

Kurt’s key takeaways

Smart glasses represent a strange moment in the evolution of technology. On one hand, they promise convenience. People can capture moments hands-free or access digital information instantly. On the other hand, they blur the line between everyday life and constant surveillance. Apps like Nearby Glasses show that some people are already pushing back. They want tools that reveal when hidden cameras might be nearby. However, technology alone will not settle the debate. The real question is how society decides to balance innovation with basic expectations of privacy.

And that leads to a bigger question. If cameras can hide in ordinary glasses, should people be required to reveal when they are recording you? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Technology

Trump administration is allegedly collecting $10 billion on the TikTok deal

Published

20 hours ago

March 15, 2026

Press Room

Trump administration is allegedly collecting billion on the TikTok deal

In September, Donald Trump claimed that “the United States is getting a tremendous fee” for brokering the TikTok deal. Now sources tell the Wall Street Journal and the New York Times that fee is expected to be in the range of $10 billion. The money is supposedly being paid by new investors, including Oracle and Silver Lake. Reports are that $2.5 billion was already paid to the Treasury when the deal closed on January 22nd. The rest will be paid out in installments.

This is the latest example of the Trump administration inserting itself into private business in unprecedented ways, including taking on a 10-percent stake in Intel last August, a “golden share” in US Steel, and a 20-percent cut in chip sales from Nvidia to China. In this instance, the deal also involves one of Trump’s biggest supporters and fundraisers, Larry Ellison, co-founder and CTO of Oracle.

If the reporting is accurate, the fee would represent over 70 percent of the deal’s value, which saw a group of investors take a majority stake in TikTok for $14 billion.