Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Thumbnail

MIE faces class-action lawsuit after cyberattack

EHR vendor Medical Informatics Engineering is facing significant fallout from its recent cyberattack with an Indiana resident affected by the data breach filing a class-action lawsuit in federal court against the company, alleging the vendor did not adequately protect its software from a cyberattack.

Thumbnail

HHS issues guide of HIPAA basics

In response to ongoing confusion about HIPAA, the Department of Health and Human Services has released a guide covering the basics of the law. 

1,100 VA paper records accidentally tossed in dumpster

A Department of Veterans Affairs hospital in South Dakota is notifying patients after an employee accidentally threw a box containing 1,100 patient records into a dumpster, according to an article published by Rapid City Journal.

Missing flash drive impacts 1,000 Ohio patients

A missing flash drive is the source of a potential data breach affecting just over 1,000 patients of OhioHealth Riverside Methodist Hospital in Columbus. 

Data breach impacts 5,300 payer members

A criminal fraud scheme is the reason 5,300 current and past members of New York-based payer Healthfirst are being notified of a data breach. 

Detailed guide available to help providers ward off data breaches

A new, federally funded guide, the first in a planned series, is available to help healthcare providers and other organizations seeking to beef up cybersecurity.

Data breach bill stalls

Hardly a week goes by without another data breach affecting healthcare, but congressional lawmakers haven't advanced a data breach notification bill.

Survey says CISOs should get the blame, but no power

While most said chief information security officers (CISOs) offer "valuable guidance," only 38 percent of CEOs and other C-suite leaders believe they should be in charge of security strategy and purchasing decisions, according to a ThreatTrack Security report. 

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.