Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

1,100 VA paper records accidentally tossed in dumpster

A Department of Veterans Affairs hospital in South Dakota is notifying patients after an employee accidentally threw a box containing 1,100 patient records into a dumpster, according to an article published by Rapid City Journal.

Missing flash drive impacts 1,000 Ohio patients

A missing flash drive is the source of a potential data breach affecting just over 1,000 patients of OhioHealth Riverside Methodist Hospital in Columbus. 

Data breach impacts 5,300 payer members

A criminal fraud scheme is the reason 5,300 current and past members of New York-based payer Healthfirst are being notified of a data breach. 

Detailed guide available to help providers ward off data breaches

A new, federally funded guide, the first in a planned series, is available to help healthcare providers and other organizations seeking to beef up cybersecurity.

Data breach bill stalls

Hardly a week goes by without another data breach affecting healthcare, but congressional lawmakers haven't advanced a data breach notification bill.

Survey says CISOs should get the blame, but no power

While most said chief information security officers (CISOs) offer "valuable guidance," only 38 percent of CEOs and other C-suite leaders believe they should be in charge of security strategy and purchasing decisions, according to a ThreatTrack Security report. 

A closer look at parade confetti reveals medical records

The U.S. Women’s soccer team earned well-deserved praise for their World Cup victory over Japan as well as a New York City ticker-tape parade. The confetti that rained down on them during that parade, however, contained a surprise: patient medical information.

UCLA Health cyberattack could impact 4.5M

As many as 4.5 million individuals may have been impacted by a criminal cyberattack on UCLA Health.  

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.