Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Thumbnail

OCR official: No timeframe yet for audits, but expect more in-depth reviews

BOSTON—At the HIMSS’ Privacy and Security Forum on Sept. 9, Office of Civil Rights’ Senior Advisor of Health Information Privacy Linda Sanches declined to elaborate on a timeline for audits, noting that the agency still is entrenched in a technology upgrade that has thrown plans off schedule.

Healthcare cyberattacks increased 91% in one year

BOSTON—Targeted cyberattacks on healthcare organizations have increased 91 percent between 2012 and 2013, according to Nathan Russ, director of healthcare industry vertical for Symantec, who spoke at HIMSS’ Privacy and Security Forum on Sept. 8.

BCH CIO shares experience with Anonymous cyberattack

BOSTON--Boston Children’s Hospital (BCH) faced a bizarre cyberthreat earlier this year and learned valuable lessons to prepare for future incidents, according to Daniel Nigrin, MD, MS, the organization’s senior vice president of information services and CIO, who shared the experience during a session at HIMSS’ Privacy and Security Forum on Sept. 8.

Thumbnail

Identity theft ring cited in AltaMed breach

Los Angeles-based AltaMed Health Services has notified nearly 3,000 patients that their personal data are at risk after learning of a former AltaMed employee’s involvement in an identity theft ring.

Thumbnail

HHS: Healthcare.gov breach did not compromise personal data

Hackers breached the Healthcare.gov website in July when they uploaded malicious software to a test server, but there’s no sign that personal data are at risk.

California breach impacts 6.5K

A California hospital has notified 6,500 patients of a breach to their health information following the unauthorized removal of records from the hospital premises.

Memorial Hermann breach impacts 10K

An employee inappropriately accessing confidential information of patients is the source of a data breach in Texas impacting more than 10,000 individuals.

Redspin Releases IT Security Advisory for Healthcare CEOs

CARPINTERIA, Calif., Sept. 2, 2014--Redspin, Inc., a leading provider of HIPAA security risk assessments and penetration testing services, today released an IT security advisory specifically for senior executives in the healthcare industry.

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.