Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Florida hospital employee steals identities, causes breach

A Florida hospital experienced a data breach courtesy of an employee whose job was to help patients with mental health problems find jobs within the hospital system. Instead, he stole their identities.

Unrelated police activity uncovers stolen patient data

An unrelated drug-related investigation led to the discovery of a list of stolen patient data.

Bon Secours employees cause of breach

Bon Secours Mary Immaculate Hospital in Suffolk, Va., is notifying about 5,000 patients after discovering a significant amount of inappropriate access to patients’ EHRs from two employees inside the facility.

HITRUST discloses breach of 111 records

The Health Information Trust Alliance (HITRUST) informed the public that a compromised web server caused the leak of 111 records, which included some real names, companies, addresses, phone numbers and email addresses, in addition to six encrypted passwords. The files did not contain personal health or other sensitive information, according to the May 28 notice.

Thumbnail

Weekly roundup: Breaches, HIE in the news

Breaches are back in the news this week with two more reported breaches impacting almost 3,000 patients in Miami and Sonoma, and Idaho State University (ISU) settling on a hefty $400,000 fine for its HIPAA violations.

Sonoma hospital breach impacts 1,350

Sonoma Valley Hospital has notified 1,350 patients that their information was inadvertently posted on its website, according to the organization.

ONC releases Direct guidelines for secure HIE

The Office of the National Coordinator for Health IT has released guidelines to provide recommended policies and practices for health information service providers (HISPs), trust communities and accrediting bodies such as DirectTrust to enable providers to securely exchange patient information across geographic, organizational and vendor boundaries.

Breach: Miami org loses 1,400 paper records

The paper medical records of 1,407 patients have been lost by Jackson Health System in Miami.

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.

Trimed Popup
Trimed Popup