Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Bill would establish CISO role for HHS

House Energy and Commerce Committee members Congresswoman Doris Matsui (D-Calif.) and Congressman Billy Long (R-Mo.) introduced the HHS Data Protection Act which would establish the Office of the Chief Information Security Officer (CISO) within the Department of Health and Human Services (HHS) and elevate the position out from under the CIO.

Calif. legislation addresses ransomware in healthcare

California is leading the charge for healthcare cybersecurity by passing legislation that outlaws ransomware and specifies how the crime should be prosecuted. 

Stolen mail truck impacts 2,400 Kaiser Permanente members

The theft of a mail truck carrying protected health information is the source of a data breach affecting 2,400 members of Oakland, Calif.-based Kaiser Permanente.

Gem launches blockchain initiative

Gem, a blockchain technology platform, has launched Gem Health, an initiative for building an inclusive blockchain ecosystem for healthcare.

Thumbnail

Physical theft and loss the top reason for healthcare security incidents

Almost three-quarters of security incidents in healthcare in 2015 involved physical theft and loss, insider and privilege misuse and miscellaneous errors, according to the Verizon 2016 Data Breach Investigations Report.

Oneida Nation suffers data breach

The Oneida Nation's Oneida Health Center in Wisconsin has reported a data breach after a flash drive containing details of patients' dental information was stolen.

Phishing email the source of a breach for Wyoming Medical Center

An email phishing scheme has led to a data breach impacting 3,184 patients of Wyoming Medical Center. 

N.C. provider to pay $750,000 to settle HIPAA violations

Raleigh Orthopaedic Clinic of North Carolina will pay $750,000 to settle HIPAA violation charges.  

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.