Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

HHS issues guidance on de-identification of patient data

The Department of Health and Human Service’s (HHS) Office for Civil Rights has issued guidance regarding two methods for de-identification of protected health information to assist covered entities understand what de-identification is and how de-identified information is created.

OCR Director Leon Rodriguez: ‘Enforcement breeds compliance’

The HITECH Act tasked the Office for Civil Rights within the Department of Health and Human Services with auditing HIPAA-covered entities to ensure personal health information is being protected. Since then, the office has turned its attention to enforcement, according to OCR Director Leon Rodriguez, JD, who spoke Dec. 13 at the Privacy and Security Forum hosted by the Health Information and Management Systems Society and Healthcare IT News.

Are you ready for an MU audit? Advice from Adventist Health System

Providers attesting to Meaningful Use are required to complete security risk assessments, but many may be falling short, said Sharon Finney during a presentation at the Privacy and Security Forum hosted by the Health Information and Management Systems Society and Healthcare IT News. 

Health IT security is 'a collective problem'

Health IT’s integration into clinical practice will continue growing and it’s time for healthcare to commit to making a connected health landscape safer, according to Tim Zoph, keynote speaker at the Privacy and Security Forum hosted by the Health Information and Management Systems Society and Healthcare IT News.

Lessons learned when Health IT advisory company realizes own vulnerabilities

A consulting firm well-versed in the importance of health information privacy was forced to dive deep into the murky issues surrounding health information security when it experienced a breach of its own, Micky Tripathi said during a Dec. 14 presentation at the Privacy and Security Forum hosted by the Health Information and Management Systems Society and Healthcare IT News.

Rodriguez: Privacy & security efforts must be 'ongoing exercise'

Patients want to text and call their doctors but our security needs have not caught up to patient demands, said Leon Rodriguez, director of the Office of Civil Rights (OCR).

Email intruder causes N.C. hospital data breach

Approximately 5,600 patients of Carolinas Medical Center-Randolph are impacted by a data breach caused by an unauthorized electronic intruder who obtained incoming and outgoing emails from a provider's account without the provider's or the hospital's knowledge.

Survey: 94% of providers had data breach in past two years

Almost all healthcare organizations surveyed suffered at least one data breach during the past two years. The Third Annual Benchmark Study on Patient Privacy & Data Security by Ponemon Institute, sponsored by ID Experts, found that 94 percent of those organizations surveyed suffered at least one breach and 45 percent experienced more than five data breaches.

Around the web

U.S. health systems are increasingly leveraging digital health to conduct their operations, but how health systems are using digital health in their strategies can vary widely.

When human counselors are unavailable to provide work-based wellness coaching, robots can substitute—as long as the workers are comfortable with emerging technologies and the machines aren’t overly humanlike.

A vendor that supplies EHR software to public health agencies is partnering with a health-tech startup in the cloud-communications space to equip state and local governments for managing their response to the COVID-19 crisis.

Trimed Popup
Trimed Popup