Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Governance key to making security progress

“Traditionally, the security guy is the bad guy. Historically, security has to kick open doors. Governance is the key to open those closed doors,” said Kim Sassaman, director of information security and HIPAA security officer, Presbyterian Health System in Albuquerque, speaking during a webcast on security governance hosted by the Institute for Health Technology Transformation.

Privacy and security strategies

“If individuals lack trust that information will be protected as health IT moves forward and as mobile devices continue to be used, it’s going to affect their willingness to disclose and share information and could have life-threatening consequences,” John Benevelli, acting senior advisor, HIPAA Compliance and Enforcement, Office for Civil Rights. Benevelli spoke on a panel discussing privacy and security at the Centers for Medicare & Medicaid Services’ 2013 eHealth Summit.

Former clinic employee stole patient data

A former employee stole protected health information from a Colorado spine clinic.

Report: Data breaches are escalating

The frequency, severity and impact of data breaches are escalating with the looming threats of organized crime, corporate espionage and cyberterrorism, according to a report from ID Experts, an Ore.-based security company.

Stolen x-ray films cause breach

Michigan-based Henry Ford Health System is notifying 15,417 patients of the possible compromise of their health information after old x-ray films were stolen from a storage warehouse before the films could be destroyed.

Nearly 3,000 notified in Calif. breach

Long Beach Memorial Medical Center in California has notified 2,864 patients of a breach of their protected health information, which was improperly accessed by an employee.

Cedars-Sinai fires five over wrongfully accessing records

Following a high-profile birth at the facility, Cedars-Sinai Medical Center has fired five workers and a student research assistant over privacy breaches involving patient medical records.

277K impacted in Texas breach--largest ever?

Texas Health Harris Methodist Fort Worth is notifying some 277,000 patients that their protected health information has been compromised after hospital microfilms, which were supposed to be destroyed, were found in various public locations. This marks the biggest HIPAA privacy breach of 2013, if not the largest to date.

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.