Samwise Healthcare IT Newsletter
Wednesday, September 30, 2026
AI coding tools inflate hospital bills by ~$942M, Blue Cross analysis finds
A Blue Cross Blue Shield Association analysis concluded that hospitals’ AI-assisted coding tools added approximately $942 million in excess medical charges, sparking a significant dispute between insurers and providers. Insurers say the AI tools are systematically inflating billing complexity codes and driving up premiums. Hospital billing companies have disputed the findings, pushing back on the methodology, according to Healthcare Dive coverage this week. As AI increasingly automates revenue cycle management across U.S. health systems, the debate raises pressing questions about algorithmic transparency and who bears responsibility when AI tools drive up costs.
Source: Healthcare Dive
AdaptHealth confirms ShinyHunters breach exposed 4.1 million patients
Home medical equipment provider AdaptHealth has confirmed that 4.1 million patients had their personal information exposed in a July 2026 cyberattack linked to the ShinyHunters hacking group. The company disclosed the full breach scope this week, months after initially notifying the SEC following discovery of the attack. According to HIPAA Journal and BleepingComputer, compromised data included personal health information, though Social Security numbers and financial account data were reportedly not stored in the affected systems. AdaptHealth serves millions of Americans with home oxygen, CPAP devices, and other durable medical equipment.
Source: BleepingComputer
Boston Scientific begins restoring global shipments after September cyberattack
Medical device giant Boston Scientific is beginning to restore global order processing and shipping systems after a September cyberattack disrupted manufacturing operations and halted product deliveries worldwide. The company confirmed the incident in a statement posted to its newsroom, describing an ongoing response. According to reporting from MedTech Dive, Cybersecurity Dive, and Supply Chain Dive, the disruption affected Boston Scientific’s ability to ship devices to hospitals and health systems. Becker’s Hospital Review reported the company is nearing a full shipping restart. The attack highlights the growing vulnerability of medical device manufacturers, whose supply chain disruptions can directly affect patient care continuity.
Source: MedTech Dive
Senate HELP Committee advances bipartisan Health Care Cybersecurity and Resiliency Act
The Senate Health, Education, Labor and Pensions (HELP) Committee advanced the Health Care Cybersecurity and Resiliency Act of 2026 (S.3315) this week, clearing a key hurdle for the bipartisan legislation. The bill would establish minimum federal cybersecurity standards for healthcare organizations and direct approximately $1.3 billion toward helping hospitals fund compliance. CyberScoop and Healthcare IT News covered the committee vote, which follows a wave of major healthcare breaches this fall. The legislation’s bipartisan backing is seen as improving its prospects for a Senate floor vote as lawmakers face mounting pressure over the healthcare sector’s cybersecurity vulnerabilities.
Source: HIPAA Journal
Thousands of nurses stage September 30 Palantir protest in San Francisco
National Nurses United (NNU) is staging a major September 30 march in San Francisco, with thousands of nurses expected to protest Palantir Technologies’ expanding role in U.S. hospitals. The union has escalated its campaign against Palantir throughout the fall, expanding from initial civil disobedience actions to an eight-city mobilization. Nurses cite two primary concerns: AI-driven hospital automation that they say threatens staffing levels, and Palantir’s government surveillance contracts with Immigration and Customs Enforcement. Healthcare IT News has covered the growing union pushback, which puts Palantir’s hospital AI contracts at the center of a high-stakes labor and technology dispute.
Source: National Nurses United
Mayo Clinic deploys NVIDIA Blackwell infrastructure to drive generative medical AI
Mayo Clinic has deployed NVIDIA Blackwell GPU infrastructure to drive generative AI solutions in medicine, according to a new announcement from the Rochester health system. Healthcare IT News described the deployment as accelerating Mayo’s medical AI development across clinical and research workflows. CEO Gianrico Farrugia shared the announcement on LinkedIn, calling it a milestone in institutional AI capability. The deployment connects to Mayo’s broader Mayo Clinic Platform initiative, which offers AI tools for health systems worldwide. Becker’s Hospital Review separately reported that Mayo recently released an AI platform for global health system management, signaling expanded enterprise AI ambitions.
Source: Mayo Clinic News Network
Gibson Area Hospital listed as WallStreet ransomware victim
Gibson Area Hospital & Health Services, an Illinois community hospital, was listed as a victim by the WallStreet ransomware group this week, according to HackNotice and tracking site Ransomware.live. The attack, reported September 29, adds to a cluster of September ransomware incidents targeting healthcare organizations. Community hospitals face particularly acute risks from ransomware attacks due to thinner IT budgets and limited cybersecurity staffing, making recovery more challenging than at large health systems. Details on whether patient data was exfiltrated or operational systems were disrupted were not immediately confirmed by the hospital as of publication.
Source: HackNotice
Astrana Health discloses SEC-reported social engineering attack on sensitive data
Astrana Health, a publicly traded health technology company, disclosed to the Securities and Exchange Commission via a September 22 Form 8-K that hackers used social engineering tactics to access systems containing sensitive patient and business data. Bank Info Security and SecurityWeek reported the incident, with The Record noting Astrana joins Veradigm and Nutex as healthcare tech firms recently disclosing breaches to the SEC. HIPAA Journal described the attack as a social engineering incident. Class action investigations are reportedly underway. The incident reinforces concerns about social engineering as the leading threat vector for health sector cyberattacks.
Source: Bank Info Security
Every newsletter preserved and searchable
Curated by JD · samwise.agency