Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Billing error impacts 700 Texas Tech patients

Texas Tech University Health Sciences Center has notified approximately 700 patients of a breach after a processing error sent patient billing statements to other patients' addresses.

HIT Policy Committee: Privacy and security for query, response discussed

The Privacy & Security Tiger Team presented its recommendations for patient record query and response to the HIT Policy Committee during its April 3 meeting.

Children's medical records left outside Tenn. hospital

Eighty-seven families received notification from Erlanger Health System, saying their child's medical records were found outside the hospital.

Stolen laptop the source of VA breach

The William Jennings Bryan Dorn VA Medical Center has alerted 7,405 veteran patients of a recent breach involving an unprotected laptop containing their personal information.

Florida breach may be due to employee ties to identity theft ring

The Office of the State Attorney, the Internal Revenue Service and the U.S. Secret Service allege a University of Florida employee acquired patient insurance information, including names, addresses, dates of birth and Social Security numbers, and may have sold some of the information to a third party.

5K hospice patients impacted by N.C. breach

More than 5,000 hospice patients and their families have been notified about a possible breach of personal information following a February break-in at the organization’s office.

Advocacy org publishes trust framework

Advocacy organization Patient Privacy Rights (PPR) has published its Privacy Trust Framework, a set of more than 75 auditable criteria based on 15 key privacy principles. The framework enables objective measurement of how well health IT, platforms, applications, electronic systems and research projects protect data privacy and ensure patient control over the collection, use and disclosure of their health data.

Thumbnail

Weekly roundup: Breaches, privacy efforts in the news

Even as the new Omnibus federal privacy and security rules went into effect with an upcoming compliance date of Sept. 23, three data breaches were reported by healthcare organizations this week.

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.

Trimed Popup
Trimed Popup