Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Thumbnail

U.S. Postal Service: Hack compromised health data of 485K individuals

The health information of about 485,000 U.S. Postal Service (USPS) employees, former employees and retirees was breached when intruders broke into the service’s computer networks last fall.  

Improper record disposal puts 12.5K at risk

The mistaken disposal of paper documents by a Philadelphia payer compromised the personal information of 12,500 of its members.

Boston Children’s Hospital agrees to pay $40K following breach

Boston Children’s Hospital has agreed to pay $40,000 following a breach that compromised patient health information, according to Massachusetts Attorney General Martha Coakley.

Breach: Unencrypted laptop stolen from hospital employee's car

Northwestern Memorial HealthCare is notifying 2,800 patients of a data breach after a laptop containing the data was stolen from an employee's car.

Virginia health system accidentally donates CDs with patient data

An employee at Virginia Commonwealth University Health System accidentally donated compact discs containing protected patient data for children’s art projects, reports Richmond Times-Dispatch.

Illinois hospital's data held for ransom

In a twist on the traditional healthcare data breach, an anonymous party accessed the protected health information of a critical access hospital in southern Illinois and threatened to release more data unless a "substantial" ransom payment was made. 

Thumbnail

Former employee sentenced to two years for identity theft

A laboratory technician was sentenced to two years in federal prison for stealing identities at Alabama-based Flowers Hospital and using them fraudulently in tax returns, reports WTVY.com.

Thumbnail

Privacy and security concerns at the forefront

It’s that time of year when research and consulting firms and other organizations offer their predictions for top health IT concerns for the new year and privacy and security seems to be taking a lead position.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.