Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Lost USB drive source of breach for Utah Medicaid patients

The Utah Department of Health (UDOH) has begun the process of notifying approximately 6,000 Medicaid clients that some of their personal information was misplaced by a third-party contractor. The contractor, Goold Health Systems, processes Medicaid pharmacy transactions for the UDOH.

Packard Children's breach impacts 57K patients

Lucile Packard Children’s Hospital and the Stanford University School of Medicine, both located in Stanford, Calif., are notifying approximately 57,000 patients about a potential data breach.

Exclusive: Privacy rule refocuses on breaches, business associates

The wait for the omnibus privacy rule “was extraordinary,” considering there was no good reason for the delay, Lisa J. Sotto, managing partner of the New York City office of Hunton & Williams law firm, told Clinical Innovation + Technology in an interview. But, “it is definitely time to move to the next generation with respect to HIPAA.” When HIPAA was enacted in 1996, “we were in the dark ages of data privacy and security so a refocus is a good thing.”

Congressman releases draft bill on mobile apps privacy, security

Months after launching a website devoted to consumer feedback on privacy and security for mobile apps, Congressman Hank Johnson (Ga.-D) has released the discussion draft of the APPS Act, a bill to increase consumer privacy on mobile devices.

Washington University laptop theft affects 1,100

An unencrypted, password-protected laptop stolen from the hotel room of a Washington University professor traveling in Argentina contained information on 1,100 patients, including names, dates of birth, diagnoses and Social Security numbers.

HHS releases final privacy rule

The U.S. Department of Health and Human Services (HHS) released the final omnibus rule designed to strengthen the privacy and security protections for health information established under HIPAA. The rule enhances patients' privacy protections, provides individuals new rights to their health information and strengthens the government’s ability to enforce the law.

Testing of security for information exchange planned

The National Cybersecurity Center of Excellence plans to test tools and technologies to support the secure exchange of electronic health information, especially for small healthcare providers.

Thumbnail

Weekly roundup: 2013 starts out big

Chances are good that you are at least somewhat affected by any of the flu-like symptoms currently sweeping the U.S., either personally or via record numbers of patients at your facility. Apparently, 2013 got the memo to go big or go home. From the record levels of flu occurring so early in the year to the three breaches we’ve already reported this year, 2013 is set to have a big impact.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.