Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

2,000 Piedmont HealthCare patients alerted to possible breach

North Carolina-based Piedmont Healthcare notified approximately 2,000 patients of a potential breach of their credit card information and other personal information, according to a May 16 Charlotte Observer story.

Indiana breach caused by stolen laptop

Another stolen laptop is the source of yet another data breach. A password-protected, unencrypted laptop was stolen from the care of an employee of Indiana University Health Arnett in Lafayette.

Unsecured email cause of Memphis breach

The Regional Medical Center in Memphis is notifying physical therapy patients of a HIPAA breach after an employee sent out three unsecure emails containing the protected health information and Social Security numbers of nearly 1,200 patients.

Rochester medical center suffers third breach

The University of Rochester Medical Center (URMC) suffered its third significant data breach after officials announced that one of its physicians misplaced an unencrypted USB drive containing the protected health information of 537 patients.

Vets sue over data breach

The William Jennings Bryan Dorn VA Medical Center in Columbia, S.C., faces a federal lawsuit following a breach that impacted more than 7,400 veterans. On Feb. 11, a laptop containing personal information--including names, birth dates and partial Social Security numbers--was stolen from the facility. The laptop was unprotected.

NIST updates privacy, security controls

A revision to the federal government’s foundational computer security guide, also applicable to and used in the private sector, is available.

Email the cause of Texas hospice breach

A routine internal compliance audit led to the discovery of a potential security breach at Hope Hospice. More than 800 patients were notified of the breach.

Hearing covers HIPAA misinterpretation

A misunderstanding or over-interpretation of HIPAA by healthcare providers is preventing vital health information from being shared with family and caregivers, according to an April 26 Congressional hearing on the law.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.