Medical records, data easily found online through insecure networks

Sensitive information of more than 5 million U.S. patients, including medical records and data, are easily discoverable due to insufficient protections. This data is accessible to anyone with basic computer expertise and, in some cases, through free software programs or even a typical web browser, ProPublica reported in a recent investigation.

The media outlet uncovered 187 servers unprotected by passwords or basic security precautions where medical data was stored and retrieved, including in doctors’ offices, medical-imaging centers and mobile X-ray services.

In fact, the ease of finding records was less like hacking, and more like “walking through an open door” online, according to one expert who spoke with ProPublica. Medical data from more than 16 million patient scans, such as MRIs, CT scans and X-rays, were found in the investigation, and they included birthdates, names and even social security numbers.

The report underscores the importance of cybersecurity in healthcare, but few healthcare employees undergo any training in the field, according to one recent report.

See the full story below:

Amy Baxter

Amy joined TriMed Media as a Senior Writer for HealthExec after covering home care for three years. When not writing about all things healthcare, she fulfills her lifelong dream of becoming a pirate by sailing in regattas and enjoying rum. Fun fact: she sailed 333 miles across Lake Michigan in the Chicago Yacht Club "Race to Mackinac."

Around the web

The tirzepatide shortage that first began in 2022 has been resolved. Drug companies distributing compounded versions of the popular drug now have two to three more months to distribute their remaining supply.

The 24 members of the House Task Force on AI—12 reps from each party—have posted a 253-page report detailing their bipartisan vision for encouraging innovation while minimizing risks. 

Merck sent Hansoh Pharma, a Chinese biopharmaceutical company, an upfront payment of $112 million to license a new investigational GLP-1 receptor agonist. There could be many more payments to come if certain milestones are met.