Vanta: HIPAA incorrect default variant
Affected components: Core AppVanta Web App - Core App
Timeline of updates
- monitoring
An incorrect default variant has been set for our HIPAA framework, leading to the addition of new controls which were not previously selected by users. A fix has been implemented and we are monitoring the results.
- resolved
Incident has been resolved, default variant set to the correct one for the HIPAA framework.
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
First version captured
In the 2026-10-17 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
82baf1f751d9428b…
Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).
Cite this
Status incident (vendor impact label: none) posted by Vanta, started 2026-07-07 17:02 UTC, resolved after 3.1 h, 2 update(s).
- Title
- HIPAA incorrect default variant
- Vendor
- Vanta
- Date
- URL
- https://rewindex.com/company/vanta/incidents/jclb3vkmq5fq
Vanta profileRecent Vanta incidentsAll outages on July 7, 2026Vanta in July 2026MarkdownJSON