Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Massive breach impacts 729K patients

The theft of two laptops from an office at AHMC Healthcare in Alhambra, Calif., compromised the protected health information of approximately 729,000 patients, according to a notice published on the provider’s website.

Facebook photo is source of Arizona security breach

A Facebook photo that inadvertently captured a patient’s personal information was at the heart of a breach that took place at the University of Arizona Medical Center.

Court dismisses UCLA breach lawsuit

A California appellate court threw out a class-action lawsuit against the University of California over a breach that exposed personal information of more than 16,000 patients at the University of California-Los Angeles Health System, according to an Oct. 16 article published in Metropolitan News-Enterprise.

Thumbnail

HIX debate continues, VA privacy efforts fail to impress

This week brought some disturbing news on the privacy and security front with the report that the Department of Veterans Affairs has experienced more than 14,000 privacy breaches since 2010.

3,500 patients impacted in laptop theft

Yet another laptop theft is the source of a breach.

VA leads nation in privacy breaches

The Department of Veterans Affairs (VA) has some explaining to do. From 2010 through May of this year, the organization's employees or contractors were responsible for more than 14,000 privacy breaches.

Unsecure email causes N.C. breach

A North Carolina organization has notified 1,310 patients that protected health information was in an unsecured email sent to a trusted outside source.

Privacy and security certification program launched in Texas

The Texas Health Services Authority and the Health Information Trust Alliance announced a partnership to develop and implement the Texas Covered Entity Privacy and Security Certification Program, according to a joint announcement.

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.