Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Healthcare data breaches more expensive than other industries

Healthcare organizations will pay more per lost or stolen record when their data is breached, according to a new study by IBM and the Ponemon Institute.

Thumbnail

Unauthorized access blamed in more 2016 data breaches than hacking

The leading cause of healthcare data breaches so far this year is unauthorized access or disclosure, not hacking, according to data compiled by HHS’ Office of Civil Rights (OCR).

Experts weigh in on elevating CISO within HHS to improve cybersecurity

Several data security experts testified before a congressional panel in favor of a House proposal to elevate HHS’s chief information security officer (CISO) to a separate office, while one expressed concerns about making the office a presidential appointment.

ACLU: Myriad Genetics kept data from breast cancer patients

The American Civil Liberties Union has filed a complaint on behalf of breast cancer patients who claim Utah-based Myriad Genetics violated HIPAA law by refusing to turn over the patient’s own genetic data.

Two heavy hitters slug it out over MU’s role in breaches

Meaningful Use may not have launched the hacker express into healthcare, but it surely seems to have greased the rails. 

Thumbnail

OCR: Cybersecurity needs to be a priority

Federal regulators urged healthcare organizations to have plans in place to deal with security issues such as data breaches involving patient and business information.

Hospital faces criticism for filming surgeries

In stepping up its surveillance after anesthesia drugs started going missing, Sharp Grossmont Hospital filmed women undergoing surgery without their permission.

Brookings report asks OCR to share data breach findings

Interviewees felt the Office of Civil Rights’ process should be more about finding ways to prevent future breaches than punishing hacked organizations.

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.