Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Lost mobile device impacts 1,800 home infusion patients

The loss of an unencrypted handheld Palm device in the Continuum Home Infusion unit of the University of Virginia Medical Center has resulted in a data breach of protected health information. More than 1,800 patients or potential patients were affected.

HHS updates HIPAA enforcement

The Office for Civil Rights within the Department of Health and Human Services (HHS) has resolved 68,896 HIPAA complaints out of 75,474 filed, or 91 percent of all complaints, since HIPAA went into effect in April 2003. 

Thumbnail

Weekly roundup: Breaches back in the news

Data breaches are back in the news after a few weeks with no reported incidents. More than 100,000 clients of a home monitoring firm were impacted when a company laptop wasstolen from an employee’s car. In Arkansas, the University of Arkansas for Medical Sciences is notifying approximately 1,500 patients of a medical records breach involving a resident physician who was terminated in 2010.

Stolen home monitoring firm laptop impacts 116K

A data breach, resulting from the theft of a laptop from the locked vehicle of a home monitoring company employee, has resulted in the notification of 116,000 potentially impacted individuals.

Arkansas breach due to terminated resident

The University of Arkansas for Medical Sciences is notifying approximately 1,500 patients of a medical records breach involving a resident physician who was terminated in 2010.

Patients want to control the privacy of their health info

Patients desire granular privacy control over their electronic health information, according to research published online Nov. 26 by the Journal of the American Medical Informatics Association.

N.H. court orders hospital to grant EHR access for hep C outbreak case

In an effort to determine how many patients have come in contact with a lab technician accused of spreading hepatitis C, New Hampshire's Merrimack County Superior Court ordered Exeter Hospital to provide public health officials with access to the hospital's EHR system, so an investigation into the hepatitis C outbreak can continue.

EHRs need to improve teens' privacy, say pediatricians

EHR technology requires changes to protect the medical privacy of adolescent patients, the American Academy of Pediatrics says in a new policy statement.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.