Research & Analysis·April 29, 2026
Four vendors held most of the risk in Q1
Today we publish the inaugural Q1 2026 State of Compliance — drawn from seven authoritative sources after the OCR portal alone showed almost no March activity. The headline finding is concentration: four upstream vendor breaches drove 67.6% of all Q1 patient impact.
