Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

doctor's open hand waiting for a payment

Emergency reimbursement for Change Healthcare breach ends in July

The last day for providers and suppliers to apply for Medicare reimbursement through the advanced payment program is July 12.

UnitedHealthcare UHC UnitedHealth

UnitedHealth needs to be solely responsible for HIPAA notifications after Change Healthcare breach, letters demand

The ONC has fallen short of plainly stating that UnitedHealth is required to send the notifications, leaving providers in regulatory limbo.

artificial intelligence cybersecurity cybercrime patient data privacy

HHS releases DDoS attack response plan

The Health Sector Cybersecurity Coordination Center's analysis details how healthcare organizations can thwart a botnet invasion.

UnitedHealthcare UHC UnitedHealth

Q&A: Healthcare cybersecurity advocate fears damage from Change Healthcare breach has only begun

Richard Staynings says the breach of Change Healthcare’s systems stems from consolidation, and the impact may devastate independent providers.

HHS: ‘Who is responsible for ensuring that individuals affected by the Change Healthcare breach receive notification?’

HHS’s Office for Civil Rights (OCR) has confirmed UnitedHealth Group can send out HIPAA-required notifications about the breach but stopped short of saying the company will be responsible for doing so.

Money bankruptcy debt liquidation

Private equity investment in healthcare down 20% as regulatory pressures mount

Public sentiment has turned against private equity stakeholders in healthcare, and that isn't likely to change post-election.

Thumbnail

100+ groups ask OCR for clarification on HIPAA requirements after Change Healthcare hack

In a letter dated May 20, a number of medical associations and physicians groups ask the OCR to force UnitedHealth Group to follow through on notifying patients that their data was taken by hackers.

money cybersecurity ransomware health IT data breach hacker

HHS launches $50M security initiative to thwart ransomware attacks at hospitals

The UPGRADE platform aims to automate the detection and patching of device-related security vulnerabilities at hospitals nationwide.

Around the web

The American College of Cardiology has shared its perspective on new CMS payment policies, highlighting revenue concerns while providing key details for cardiologists and other cardiology professionals. 

As debate simmers over how best to regulate AI, experts continue to offer guidance on where to start, how to proceed and what to emphasize. A new resource models its recommendations on what its authors call the “SETO Loop.”

FDA Commissioner Robert Califf, MD, said the clinical community needs to combat health misinformation at a grassroots level. He warned that patients are immersed in a "sea of misinformation without a compass."

Trimed Popup
Trimed Popup