Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

OCR official shares enforcement plans

The Office of Civil Rights may not have received more federal resources to do their job, but their efforts to better leverage technology and centralize activities will enable their enforcement goals, said Iliana L. Peters, JD, OCR’s senior advisor for HIPAA compliance and enforcement, at the National Institute of Standards and Technology and the OCR’s joint conference, “Safeguarding Health Information: Building Assurance through HIPAA Security,” on Sept. 24.

Dell execs offer cybersecurity advice

The growing amount of data along with more and more mobile devices are adding up to big cybersecurity problems for healthcare. Almost half (43 percent) of major breaches targeted healthcare data in 2013.

New bracelet designed to bolster health IT security

Researchers at Dartmouth College have developed a bracelet that authenticates users continuously while they are using a terminal—and automatically logs them out after they leave the computer.

Thumbnail

Breach report identifies breach patterns, best mitigation

The 2014 Verizon Breach Investigations Report gathered the data from more than 63,000 cybersecurity incidents to get descriptive statistics and trending. Stephen Brannon of the Verizon Cyber Intelligence Center presented the latest results and associated recommended controls at Safeguarding Health Information: Building Assurance through HIPAA Security, a program hosted by the Dept. of Health & Human Services’ Office of Civil Rights and the National Institute of Standards and Technology held in Washington D.C. on Sept. 23.

Thumbnail

NIST framework: Assessing an organization’s cybersecurity readiness

The National Institute of Standards and Technology’s voluntary framework for reducing cyber risks to critical infrastructure, released earlier this year, can assist providers in achieving their security goals, according to panelists at the National Institute of Standards and Technology and the Office of Civil Rights’ joint conference, “Safeguarding Health Information: Building Assurance through HIPAA Security,” on Sept. 23.

Cedars-Sinai CIO: External threats are new horizon of health security

The historically closed systems of healthcare organizations now are exposed to a growing number of medical devices, smartphones, portable devices and other external risks, changing the security landscape of the industry, Darren Dworkin, CIO of Cedars-Sinai Health System said at the National Institute of Standards and Technology and the Office of Civil Rights’ joint conference, “Safeguarding Health Information: Building Assurance through HIPAA Security,” on Sept. 23.

Thumbnail

OCR Director: ‘An ounce of prevention is a pound of cure’

Major breaches most often occur within organizations that lack comprehensive risk analyses, said Jocelyn Samuels, the new director of the Department of Health & Human Services’ Office for Civil Rights.

Former employee probable source of breach impacting 80K

A Florida hospital is facing its third data breach in two years.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.