Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Stolen laptop cause of Mississippi breach

A stolen laptop has led to a breach of patient health and personal information of University of Mississippi Medical Center patients.

Lawsuit accuses IRS agents of stealing 60M medical records

A recently filed class action lawsuit alleges that corrupt Internal Revenue Service (IRS) agents stole 60 million medical records of more than 10 million Americans without obtaining a warrant. The data theft was of such proportions that it affected roughly one out of every 25 adult American citizens, according to the complaint.

UConn Health Center suffers data breach

Approximately 1,400 patient records of the University of Connecticut Health Center were inappropriately accessed by a former employee. The Farmington organization learned of the privacy breach on Jan. 7.

NY hospital waits 15 months to report breach

A New York hospital on March 1 began notifying patients and the Office for Civil Rights about a data breach dating back to November 2011.

Top Five Information Risk, Security, and Privacy Considerations for BYOD

March 6, 2013, 2:45 PM - 3:15 PM | This session will examine the top five privacy and security considerations for Bring Your Own Device (BYOD) solutions in healthcare that both the user and the organization need to consider.

Battling Breaches Rules, Regulations & Reining in the Players

When it comes to the privacy and security of personal health information, there is always room for improvement, says Cris V. Ewell, PhD, chief information security officer for Seattle Children’s Hospital. And the final privacy omnibus rule could easily put those providers that haven’t kept up with the requirements even further behind.

EHNAC launches trusted agent accreditation program

The Electronic Healthcare Network Accreditation Commission (EHNAC), a nonprofit standards development organization and accrediting body, has partnered with DirectTrust to create a national accreditation program for health information “trusted agent” service providers, including health information service providers (HISPs), certificate authorities (CAs) and registration authorities (RAs).

Walgreens suffers another data breach

Walgreens healthcare company has notified patients and employees of a data breach after computer hardware and other paper records containing the personal health information and Social Security numbers of patients was stolen.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.