Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

A closer look at parade confetti reveals medical records

The U.S. Women’s soccer team earned well-deserved praise for their World Cup victory over Japan as well as a New York City ticker-tape parade. The confetti that rained down on them during that parade, however, contained a surprise: patient medical information.

UCLA Health cyberattack could impact 4.5M

As many as 4.5 million individuals may have been impacted by a criminal cyberattack on UCLA Health.  

Mass. hospital fined for unsecure internet use

A Massachusetts hospital has been fined $218,400 and required to implement a HIPAA privacy and security corrective action plan under a settlement with the Department of Health and Human Services's Office for Civil Rights.

Thumbnail

JAMA publishes inaccurate study on data breaches

While there have been numerous data breaches in the past few years, it seems a research letter on the topic published in the Journal of the American Medical Association in April overstated the problem.

Privacy and security workgroup offers draft recommendations

The Health IT Policy Committee’s Privacy and Security Workgroup has held hearings over that last several months to narrow its focus on potential harmful uses said co-chair Stanley Crosley during the June 30 meeting.

Orlando Health breach impacts 3,200

Another health system is notifying patients after an employee inappropriately accessed protected health information.  

Thumbnail

CHIME battling for national patient identifier

The College of Healthcare Information Management Executives (CHIME) is taking on regulations preventing a national patient identifier calling calls the lack of a consistent patient identity matching strategy “the most significant challenge inhibiting the safe and secure electronic exchange of health information. As our healthcare system begins to realize the innately transformational capabilities of health IT, moving toward nationwide health information exchange, this essential core functionality—consistency in patient identity matching—must be addressed.”

Majority find cybersecurity a growing concern

The 2015 HIMSS Cybersecurity Survey found that 87 percent of respondents name cybersecurity as an increasing business priority over the past year. 

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.