Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Thumbnail

Former employee sentenced to two years for identity theft

A laboratory technician was sentenced to two years in federal prison for stealing identities at Alabama-based Flowers Hospital and using them fraudulently in tax returns, reports WTVY.com.

Thumbnail

Privacy and security concerns at the forefront

It’s that time of year when research and consulting firms and other organizations offer their predictions for top health IT concerns for the new year and privacy and security seems to be taking a lead position.

Thumbnail

Report predicts more cybercrime for healthcare

The healthcare industry will continue to be a vulnerable and attractive target for cybercriminals in 2015, according to the second annual Data Breach Industry Forecast conducted by Experian.

Thumbnail

AK organization settles HIPAA violations for $150K

A mental health organization in Alaska has agreed to pay a fine and improve its HIPAA compliance program after a Department of Health and Human Services investigation found the group failed to appropriately safeguard patient data.

Thumbnail

$400K settlement reached in Kansas City medical records case

Lawyers have reached a $400,000 settlement in a Kansas City case in which records tossed into a dumpster were blown across a neighborhood, reports The Kansas City Star.

Third-party error leaves data of 25K accessible online

The data of 25,000 Highland-Cashiers Hospital patients was inadvertently left accessible online but the facility isn't calling it a data breach becuase "there's no evidence that the information was accessed or used in any way," hospital president Craig James, told WLOS.

Thumbnail

AHA comments on cybersecurity: Responsibility lies with device manufacturers

Medical device cybersecurity should be the responsibility of device makers, according to the American Hospital Association in its submitted comments on the FDA's Collaborative Approaches for Medical Device and Healthcare Cybersecurity, published in the Federal Register on Sept. 23.

Former hospital employee snooped on 692 patients

An employee at Cleveland-based University Hospitals reportedly accessed the personal and medical information of 692 patients from Jan. 25, 2011 through June 27, 2014.

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.