Terms and Conditions

Last updated: September 23, 2026

1. Acceptance of Terms

By creating an account, subscribing, or using this Service, you agree to these Terms and Conditions and our . If you do not agree, do not use the Service.

2. Description of Service

InfoSec Signals, operated by MTC Group, LLC, collects, organizes and republishes public information relevant to healthcare information security: breach reports published by the U.S. Department of Health and Human Services, Office for Civil Rights; documents from the Federal Register; publications and news from the National Institute of Standards and Technology; advisories from the Cybersecurity and Infrastructure Security Agency; and device recall records from the U.S. Food and Drug Administration. Subscribers additionally receive alerts, digests, analytics, exports and curated views of that information.

3. Public Sources; No Government Affiliation

The underlying records are published by federal agencies and are reproduced here as published, with organization, tagging and summaries added by us. MTC Group is not affiliated with, endorsed by, or sponsored by HHS, OCR, NIST, CISA, the FDA or any other government body. The agency's own record, linked from every item, is authoritative. Entity names in breach reports are those reported to HHS by the covered entities and business associates themselves.

4. Not Legal, Compliance or Security Advice

Nothing on this Service is legal advice, a compliance determination, or a security assessment of any organization, product or vendor. Tags, exam-domain labels, corrective-action excerpts, relevance filters and watchlist matches are produced by documented heuristics and may be incomplete or wrong. You are responsible for verifying information against the source record and for your own decisions.

5. Accounts

You are responsible for maintaining the confidentiality of your account and for all activity under it. You must provide accurate information and keep it current. Linking an additional email address to your account requires proving you control that address.

6. Subscriptions, Included Access, Billing and Cancellation

Subscriber features are included at no additional charge for active subscribers of ExamPrep and for the designated site administrator of each HealthData DueCare organization, as reported to us by those services. Included access ends when the underlying subscription ends, after a short grace period.

The standalone InfoSec Signals plan is billed monthly or annually at the price displayed at checkout and renews automatically at the same interval until cancelled. Billing is processed by Stripe; we do not store your full payment card details. You can cancel auto-renewal at any time through Manage billing in your account. Cancellation takes effect at the end of the current billing period, and we do not provide partial-period refunds. If you gain included access while on a standalone plan, the plan is set to end at the close of the period you have paid for and you are not billed again.

Fee changes. We may increase subscription fees. An increase takes effect with your next scheduled payment after we publish notice on this site and email the address on your account at least 15 days in advance; it never changes the price of a period you have already paid for.

7. Alerts and Email

Watchlist alerts and the weekly digest are sent to the email address on your account and can be turned off from your account page. Delivery timing depends on the publishing agencies and on email providers; we do not guarantee that any particular record will be detected or delivered within any time.

8. Acceptable Use

You agree not to scrape, mirror, redistribute or resell the Service's organized datasets, summaries, tags or exports beyond your own organization's internal use, share your account credentials, use automated means to circumvent access controls, or use the Service in any way that violates applicable law. Exports are provided for your own analysis.

9. Intellectual Property

Government records are in the public domain. The organization, summaries, tags, heuristics, software, design and text of this Service are owned by MTC Group and protected by copyright. Your subscription grants a personal, non-transferable license to use the Service for your own or your organization's internal purposes.

10. Disclaimer of Warranties

The Service is provided "as is" without warranties of any kind, express or implied, including accuracy, completeness, timeliness, fitness for a particular purpose, or uninterrupted availability.

11. Limitation of Liability

To the fullest extent permitted by law, MTC Group is not liable for indirect, incidental or consequential damages arising from your use of the Service, including decisions made in reliance on any information, alert or omission.

12. Privacy

Our collection and use of personal information is described in our .

13. Accessibility

We aim for this Service to be usable by people with disabilities. If you encounter an accessibility barrier, contact us using the details below and we will work to address it.

14. Changes to These Terms

We may update these Terms from time to time. Continued use of the Service after a change takes effect constitutes acceptance of the updated Terms.

15. Contact

Questions about these Terms can be sent to rick@mtcgroupllc.com.