Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

27K affected by theft of hospital laptop

The theft of a hospital laptop containing registration records is the source of data breach with the potential to impact 27,000 patients.

Weekly roundup: Plenty of sources for problems and solutions

There’s no shortage of ways for patient data to be compromised as proved by the latest reports of EHR security problems.

Akron hospital employees fired for snooping

Akron General Medical Center employees were fired recently for violating hospital and federal privacy rules involving the fatal shooting of a patient in the intensive care unit.

OIG critiques Medicare approach to data breaches

Growing concerns about medical identity theft led the Centers for Medicare & Medicaid Services' (CMS) Office of Inspector General (OIG) to publish a report, CMS Response to Breaches and Medical Identity Theft, about the current rate of data breaches in healthcare.

Anthem settles with California over breach for $150K

California Attorney General Kamala D. Harris has announced a settlement with one of California’s largest health insurers, Anthem Blue Cross, over allegations that the payer failed to protect the personal information of its members. The company also must pay $150,000 to settle the claim.

Record security 'only as good as weakest link'

Working on health information exchange led Paul Tuten, PhD, senior consultant at the State HIE Program of the Office of the National Coordinator for HIT (ONC), to quickly recognize that trust and, by extension, privacy and security, is only as good as the weakest link in the chain of exchange. “Getting these issues right is very important.” Tuten was one of several speakers that participated in the National eHealth Collaborative’s program Sept. 19 on Increasing Medical Record Security.​​​

KY. data breach affects 2,500

The Cabinet for Health and Family Services is informing approximately 2,500 clients by letter of a possible employee email account breach that may have resulted in the unintentional release of information held by the Cabinet’s Department for Community Based Services.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.