Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

legal liability malpractice artificial intelligence

Hospitals, Epic sued after clinician allegedly accesses nude photos of 400+ patients

According to lawyers representing two of the plaintiffs, a shared EHR portal was used by a physical therapist at KU Health to access the sensitive photographs in what is being investigated as a data breach. 

Ransomware Cyberattack Data Breach

DaVita kidney care clinics hit by ransomware attack

The company said part of its network has been encrypted. However, it told the Securities and Exchange Commission it is still able to deliver dialysis care to patients. 

healthcare surprise billing statement payment

UnitedHealth garnishing claims to recoup ‘loans’ from Change Healthcare hack

UnitedHealth Group said it is seeking repayment of “interest-free” advances distributed to providers struggling during the shutdown of claims processing caused by the ransomware attack on Change Healthcare. 

UMMC sued after pharmacist allegedly hacked computers to spy on women

The academic medical center is accused of deploying lax security protocols that allowed an employee to access internet-connected cameras and private emails in acts of privacy invasion that lasted a decade. 

Thumbnail

Oracle Health denies cloud breached as second attack confirmed

Questions remain about the alleged breach on a legacy server at Oracle Health, as the nature of the attacks and scope of stolen data are still being investigated. 

Data breach at Oracle Health leads to extortion of hospitals

A legacy server accessed with stolen credentials is being blamed for the incident. However, the nature and scope of the attack are still being investigated, with Oracle reportedly working with the FBI to gather details. 

Optum UnitedHealthcare UnitedHealth Group HQ

Change Healthcare files to have federal lawsuits dismissed

There are at least 65 consolidated cases pending in federal courts that stem from the 2024 data breach on the claims processor's network. A judge in Minnesota has asked that the lawsuits be coordinated and consolidated as much as possible. 

ISIS is not launching terrorist attacks against hospitals, FBI says

Trade groups released a statement denying the claim's credibility, but they fear some may be inspired by a widely shared social media post. 

Around the web

SCAI President James B. Hermiller, Jr., MD, detailed the group's key policy concerns in 2025 and beyond in a new video interview. 

RBMA board member Kit Crancer offers an update on Medicare reform and advocacy in Congress and how medical societies may be able to get more traction in state legislatures.
 

Cardiology still ranks No. 4 overall, trailing just orthopedics, radiology and plastic surgery.