Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Thumbnail

Ill. provider cleared in class-action lawsuit from breach

Advocate Medical Group has been cleared of wrongdoing in a class action lawsuit alleging the organization failed to protect patient data following a massive HIPAA data breach. 

Thumbnail

Guide aims to help improve security of mobile devices

The National Cybersecurity Center of Excellence has released a draft for public comment of the first guide in a new series of publications that will show businesses and other organizations how to improve their cybersecurity using standards-based, commercially available or open-source tools. 

White House ups budget for cybersecurity efforts

The White House issued an update to President Obama's fiscal year 2016 budget request that seeks additional cybersecurity funding for several agencies, including the Department of Health and Human Services and the Department of Veterans Affairs. 

Thumbnail

This week's 3 privacy & security developments

This week in health IT, there were three interesting developments all centered around the privacy and security of health data.

Thumbnail

HITPC approves recommendations that drive better understanding of big data's privacy issues

More understanding of the privacy and security issues surrounding big data is needed to advance a learning healthcare system, according to the Health IT Policy Committee’s Privacy & Security Work Group.

94M records stolen so far this year

The records of 94 million patients have been stolen from healthcare entities so far this year, according to a report from conservative think tank American Action Forum. 

Thumbnail

MIE faces class-action lawsuit after cyberattack

EHR vendor Medical Informatics Engineering is facing significant fallout from its recent cyberattack with an Indiana resident affected by the data breach filing a class-action lawsuit in federal court against the company, alleging the vendor did not adequately protect its software from a cyberattack.

Thumbnail

HHS issues guide of HIPAA basics

In response to ongoing confusion about HIPAA, the Department of Health and Human Services has released a guide covering the basics of the law. 

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.