Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Surveys indicate public supportive of EHRs, HIE despite privacy concerns

As EHR adoption increases and health information exchange expands, the Office of the National Coordinator for Health IT wants to track public perceptions of privacy and security of health data.

Thumbnail

Bulk of Calif. breaches could be prevented with encryption

Seventy percent of breaches involving the California healthcare industry were due to unencrypted data on lost or stolen hardware or portable media, a problem that strong encryption would fix, according to the latest data breach report from the state's attorney general. Only 19 percent of such breaches occurred in other industries.

‘Possibly thousands’ of medical records fly off truck

“Hundreds, possibly thousands” of medical records accidentally flew out of the back of a medical record disposal company’s truck in southwest Omaha, reports KETV.

OIG audit finds FDA cybersecurity vulnerabilities

An Office of the Inspector General audit found cybersecurity vulnerabilities in the FDA's network that could put its data at risk.

Thumbnail

Penn. data breach caused by hacking of third-party vendor

A physician at Penn Highlights Brookville, a healthcare service, informed patients of a breach after an intruder accessed personal data stored on the server of a Ohio-based third-party vendor.

Email hacking source of UC Davis breach

The University of California Davis Health System has notified 1,326 patients that their protected health information was compromised when a physician's email account was hacked.

Thumbnail

N.C. breach impacts more than 2K patients

Cone Health, a provider based in Greensboro, N.C., is notifying more than 2,000 patients that their health information was compromised due to a clerical error.

Thumbnail

HITRUST piloting early cyberthreat warning system

HITRUST has built and is pilot testing the Cyber Threat XChange (CTX), an automated service to provide early detection and faster analysis of cyberthreats that participating organizations collect and submit to CTX.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.