Many users are unaware that conversations with consumer AI about health issues lack legal protections, unlike communications with licensed healthcare providers. This article highlights the risks of disclosing personal health information to AI, which can be subpoenaed in legal situations, exposing users to potential misuse of their private data. It emphasizes the importance of understanding what privileges are lost when opting for AI assistance over traditional healthcare communications.

ChatGPT Health may be a marketing strategy rather than a genuine innovation, potentially allowing tech giants to dominate the healthcare sector. The article questions OpenAI's claims of enhanced security and adherence to HIPAA standards, drawing parallels to past controversies with data privacy in the tech industry.

A cybersecurity breach at University of Chicago Medicine may have exposed the personal information of 38,000 patients, including names, Social Security numbers, and medical data. The breach occurred in July 2024 through a third-party vendor, Nationwide Recovery Systems, which has since been terminated. UChicago Medicine is notifying affected patients by mail and has implemented measures to enhance security.

Nearly 250,000 individuals were impacted by a data breach at Medical Associates of Brevard, a healthcare organization in Florida. The BianLian ransomware group claimed responsibility for the attack, which involved the theft of personal and protected health information. The breach was discovered in January 2025, and the organization has since notified authorities and affected individuals.

Ascension has reported a significant data breach affecting the personal information of 437,329 patients due to a cyberattack. The exposed data includes sensitive details such as names, dates of birth, and medical information, prompting concerns about patient privacy and security. Authorities are investigating the incident while affected individuals are being notified.