Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Mass. hospital fined for unsecure internet use

A Massachusetts hospital has been fined $218,400 and required to implement a HIPAA privacy and security corrective action plan under a settlement with the Department of Health and Human Services's Office for Civil Rights.

Thumbnail

JAMA publishes inaccurate study on data breaches

While there have been numerous data breaches in the past few years, it seems a research letter on the topic published in the Journal of the American Medical Association in April overstated the problem.

Privacy and security workgroup offers draft recommendations

The Health IT Policy Committee’s Privacy and Security Workgroup has held hearings over that last several months to narrow its focus on potential harmful uses said co-chair Stanley Crosley during the June 30 meeting.

Orlando Health breach impacts 3,200

Another health system is notifying patients after an employee inappropriately accessed protected health information.  

Thumbnail

CHIME battling for national patient identifier

The College of Healthcare Information Management Executives (CHIME) is taking on regulations preventing a national patient identifier calling calls the lack of a consistent patient identity matching strategy “the most significant challenge inhibiting the safe and secure electronic exchange of health information. As our healthcare system begins to realize the innately transformational capabilities of health IT, moving toward nationwide health information exchange, this essential core functionality—consistency in patient identity matching—must be addressed.”

Majority find cybersecurity a growing concern

The 2015 HIMSS Cybersecurity Survey found that 87 percent of respondents name cybersecurity as an increasing business priority over the past year. 

Thumbnail

Md. breach affects 1,000 patients

A Maryland health system is informing more than 1,000 patients that their data may have been stolen. 

Employee convicted of stealing, selling patient info

A former employee of a Louisiana health system was convicted of accessing personal identifying information of individuals and selling information to file fraudulent tax returns.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.