Healthcare Information Security

EHR Security

DoD Wants Army EHR Security Audit, Security Protocol Review

August 9, 2016 - The Department of Defense plans to investigate whether or not the Army implemented effective security protocols to protect electronic health records through an EHR security audit, set to be performed in August 2016. The DoD Inspector General explained in a memo that it will perform the audit at the U.S. Army Medical Command, the enhanced Multi-Service Market led by the Army in the Puget Sound...


Articles

Stolen Patient Records in OH Lead to Potential PHI Breach

by Jacqueline Belliveau

An Ohio-area dental practice has notified 7,784 individuals of a potential PHI breach after patient records were stolen, reported the Office of Civil Rights on its website. In a HIPAA breach notification letter, Sunbury Plaza Dental explained...

Most Hospitals Consider EHR Security in Contingency Planning

by Elizabeth Snell

Nearly two-thirds of hospitals reported that EHR security is considered through their application of  HIPAA rules as they implement contingency planning, the Office of Inspector General found. Furthermore, when it comes to EHR contingency...

Bizmatics Healthcare Data Breach Affects Another 22K Patients

by Jacqueline Belliveau

North Ottowa Medical Group has identified a hacking incident at Bizmatics, an EHR vendor, as the source of a potential healthcare data breach, according to a press release. The Michigan-based medical group was notified by Bizmatics that servers...

EHR Data Potentially Exposed in Vendor Healthcare Data Breach

by Jacqueline Belliveau

Another medical center has reported a potential healthcare data breach stemming from a hacking incident affecting EHR vendor Bizmatics, according to a HIPAA notification letter on the ENT and Allergy Center’s website. The Office of Civil...

Improper Employee Access Creates Potential Health Data Breach

by Jacqueline Belliveau

ProMedica, a healthcare organization in Ohio, has investigated a potential healthcare data breach after discovering several employees had inappropriately accessed the private medical records for patients they were not directly treating. According...

Hackers Cause Possible Healthcare Data Breach for 40K Patients

by Jacqueline Belliveau

A Connecticut-based podiatry group is facing a possible healthcare data breach that has impacted approximately 40,491 individuals after hackers accessed network services, according to the Office of Civil Rights data breach report. An outside...

How DDoS Attack Increase May Affect Healthcare Cybersecurity

by Jacqueline Belliveau

More organizations experienced multiple distributed denial of service (DDoS) attacks in the fourth quarter of 2015, which could spell out trouble for healthcare cybersecurity measures, especially for cloud-based services. According to Akamai’s...

How Can Hospital Ransomware Policies Improve in the Industry?

by Jacqueline Belliveau

As healthcare data security incidents become more sophisticated, covered entities and their business associates are attempting to develop security procedures that better manage hospital ransomware threats. With the help of several government...

Healthcare Ransomware Cases Highlight Security Needs

by Elizabeth Snell

Healthcare ransomware issues continue to be reported, causing many industry stakeholders to refer to this type of cyber attack as one of the top concerns for 2016. Ransomware is a type of malware that typically prevents an organization from accessing...

AHA Calls for Strong Healthcare Cybersecurity Measures

by Jacqueline Belliveau

The American Hospital Association (AHA) aims to help providers develop and share approaches to developing strong healthcare cybersecurity measures through its Cybersecurity webpage, according to a recent blog post. The webpage is dedicated to...

NIST Group to Fund Healthcare ID, EHR Security Pilot Project

by Jacqueline Belliveau

The National Strategy for Trusted Identities in Cyberspace (NSTIC) National Program Office has announced a new funding opportunity for innovations in federating identity credentials across the healthcare industry and promoting EHR security, according...

Preparing Healthcare Data Security for Hackers in 2016

by Roy Katmor of enSilo

The healthcare industry is undergoing a digital revolution. For the most part, this means positive developments in the speed, efficiency, and effectiveness with which the industry can treat patients and prevent diseases. Unfortunately, it’s...

Health Data Security Considerations in Precision Medicine

by Jacqueline Belliveau

Applying the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) to the Precision Medicine Initiative (PMI): Draft Data Security Principles and Framework is a positive step towards better health data security, according...

OIG Finds VA Fails to Meet FISMA, FITARA Health IT Security

by Sara Heath

The Department of Veteran’s Affairs (VA), in its efforts to update its Veterans Health Information Systems and Technology Architecture (VISTA) EHR, has failed to meet several health IT security protocol that is a part of the Federal Information...

How a Mich. Hospital Stays Proactive in Health Data Security

by Elizabeth Snell

Health data security is clearly a top priority for providers of all sizes, especially as more organizations are trying to find the best ways to remain innovative while not compromising patient data security. Ensuring that a proactive approach...

Prioritizing Patient Privacy in Your Auditing Approach

by Elizabeth Snell

LAS VEGAS - When it comes to patient privacy, a passive approach to the auditing process is not going to be enough. Covered entities need to take initiative and ensure that they are doing everything in their power to proactively find potential...

Why EHR Vendors Are Next Healthcare Data Breach Target

by Mark Menke of Digital Guardian

It’s no secret that the healthcare industry is a hackers’ gold mine for valuable, sensitive data. Along with private information like patients’ names, mailing addresses, email aliases and dates of birth, healthcare firms also...

Vendors Needed for NCCoE Guide on Secure Medical Devices

by Sara Heath

The National Cybersecurity Center of Excellence (NCCoE), a part of the National Institute of Standards and Technology (NIST), is calling for vendor participation in a project which will investigate how to better enable secure medical devices....

FDA Interoperability Draft Stresses Healthcare Data Security

by Sara Heath

As the healthcare industry continues to push for EHR interoperability, the Food and Drug Administration (FDA) believes that healthcare data security, patient safety, and risk management should be top priority for IT developers and users. In their...

X

SIGN UP and gain free access to articles, white papers, webcasts and exclusive interviews on

HIPAA Compliance
BYOD
Cybersecurity
Data Breaches
Ransomware

Our privacy policy

no, thanks