Is Ransomware Considered A Health Data Breach Under HIPAA? - Forbes: The fact is, ransomware does represent a new legal ambiguity to the federal legislation known as HIPAA, which was designed to protect patients against the loss, theft or breach of their protected health information (PHI).