Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Case study: Breach increases risk of fraud

A case study examining the 2012 Utah Department of Health data breach that compromised the protected health information of 780,000 individuals found a distinct association between healthcare data breaches and fraud.

Breach impacts mental health patient

A misdialed fax number led to a breach of mental health patient data. Fortunately, the breach impacted only one patient.

Stolen laptop, drive impacts Ariz. mental health patients

A laptop and hard drive containing sensitive medical and personal data for hundreds of mental health patients of Arizona Counseling and Treatment Services were stolen from an employee's home in March.

HITRUST guidance assesses providers’ cybersecurity preparedness

The Health Information Trust Alliance (HITRUST) recently announced the release of new guidance for healthcare providers wishing to assess their level of preparedness for cybersecurity threats. This guidance incorporates a specific subset of controls within the HITRUST Community Security Framework (CSF) that relate to cybersecurity.

Stolen laptop causes Wash. breach

More than 650 clients of the Washington State Department of Social and Health Services are impacted by a stolen laptop.

Stolen laptop impacts 13K home health patients

Yet another stolen laptop is the source of a breach impacting 13,600 patients of United HomeCare in Miami.

Billing error impacts 700 Texas Tech patients

Texas Tech University Health Sciences Center has notified approximately 700 patients of a breach after a processing error sent patient billing statements to other patients' addresses.

HIT Policy Committee: Privacy and security for query, response discussed

The Privacy & Security Tiger Team presented its recommendations for patient record query and response to the HIT Policy Committee during its April 3 meeting.

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.