If a suspected AI related breach has occurred the team should disable the affected AI tool, preserve logs and other evidence, contact Adams Brown for a free consultation.

Other actions include identifying what data was exposed, change compromised passwords, complete a HIPAA breach risk assessment (if PHI was involved), determine whether patient or law enforcement should be notified and document what happened in specific detail.

The most important thing is to contain the incident, protect PHI, preserve evidence and follow breach reporting requirements. For a full break-response checklist, see our guide on Responding to a Cybersecurity Incident.