Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

HIMSS14 Pre-Conference Symposium on Identity Management, Privacy and Security Features Hospital Practitioners, Healthcare Association Leaders

PRINCETON JUNCTION, N.J., Feb. 18, 2014  -- HIMSS14 attendees interested in learning best practices for healthcare identity management, privacy and security should attend the full-day educational symposium, "Privacy and Security: Challenges and Opportunities in Healthcare Identity," featuring leading hospital practitioners and healthcare association speakers. The symposium, hosted by the Smart Card Alliance Health and Human Services Council, will take place on Sunday, Feb. 23, 2014 at the HIMSS14 Annual Conference and Exhibition in Orlando, Fla.

Coalfire Launches Online Exchange for HIPAA Compliance and Risk Management

DENVER, Colo. – Jan. 15, 2014 – Coalfire announced today the launch of HIPAAcentral, a new compliance exchange that provides a comprehensive suite of services for covered entities and business associates and their subcontractors to manage, maintain and exchange healthcare regulatory compliance.

Redspin Reports on the "State of Healthcare IT Security"

CARPINTERIA, Calif., Feb. 5, 2014--Redspin, Inc., a leading provider of penetration testing and IT security assessments, today released its annual Breach Report 2013 – Protected Health Information. In the report, Redspin provides in-depth analysis of the complete history of PHI data breaches reported to the Department of Health and Human Services (HHS), identifies current trends, and highlights the specific areas most in need of improvement.

Tennessee’s Health eShare Direct Project Reaches Milestone 1,000th Participant

Direct Technology has been adopted by 1,000 healthcare professionals across Tennessee thanks to Health eShare, a statewide initiative through the Office of eHealth Initiatives (OeHI) to implement Direct secure email technology.

MRO Corp. Announces Acquisition of Release-of-Information Vendor MTT Enterprises, LLC

KING OF PRUSSIA, Pa.-- MRO Corp., a leading provider of technology-driven disclosure management services and applications for healthcare organizations, has acquired the assets of MTT Enterprises, LLC (Metairie, La.), a provider of release-of-information (ROI) services. Mariela Twiggs, CEO of MTT, will assume the role of MRO’s executive director of training and education, client relations. The transaction took effect September 6.

NSA revelations raise questions about privacy

With the Sept. 23 compliance deadline for the HIPAA Omnibus Rule inching closer, new revelations about the National Security Agency’s (NSA’s) ability to circumvent or crack much of the encryption that guards IT systems, including those for medical records, may stir more questions about the ability to protect and secure personal health information.

Hearing covers HIPAA misinterpretation

A misunderstanding or over-interpretation of HIPAA by healthcare providers is preventing vital health information from being shared with family and caregivers, according to an April 26 Congressional hearing on the law.

HL7 invites public opinion on personal health record model

Health Level Seven (HL7), a healthcare IT standards development organization, has released a ballot to approve its Personal Health Record System Functional Model (PHR-S FM) as a draft standard for trial use.

Around the web

Cardiovascular devices are more likely to be in a Class I recall than any other device type. The FDA's approval process appears to be at least partially responsible, though the agency is working to make some serious changes. We spoke to a researcher who has been tracking these data for years to learn more. 

Updated compensation data includes good news for multiple subspecialties. The new report also examines private equity's impact on employment models and how much male cardiologists earn compared to females.

When drugs are on the FDA’s shortage list, outsourcing facilities can produce their own compounded versions. When the FDA removed tirzepatide from that list with no warning, it created a considerable amount of chaos both behind the scenes and in pharmacies all over the country. 

Trimed Popup
Trimed Popup