Healthcare Information Security

Health IT Security and HIPAA News

NIST Seeks Comment on Remote Monitoring, Telehealth Cybersecurity

by

The National Cybersecurity Center of Excellence at NIST is seeking industry feedback on a draft paper that outlines how to best secure remote monitoring devices and systems for telehealth providers. As many healthcare delivery...

New Stealthy Russian Hacking Tool Targets Government Agencies

by

A new Russian hacking tool is targeting government systems in the United States and Europe through spear-phishing attacks, using stealthy, sophisticated mechanisms to go undetected. Discovered by Palo Alto Networks, the...

176.3 Patient Records Taken in Reported Breaches Since 2009

by

Hacking is less common in the healthcare sector than theft and unauthorized disclosure, but those cybercriminals stole more than half of the breached patient records from 2009 to 2017, according to a new JAMA Internal Medicine report. The...

HealthEquity Email Hack Breaches Data of 190K Patients

by

An email hack on two employee email accounts potentially breached the personal data of 190,000 HealthEquity customers. HealthEquity provides health savings accounts and similar services to more than 3.4 million individuals. This is the...

Building a Secure Vendor Relationship with Inventory, Management

by

The healthcare sector has been a primary target of hackers for more than a year, and the attacks continue to increase in sophistication. While many providers have adjusted their security posture in attempt to shore up some of these...

Phishing Attack Impacts Health Data of 128K Employees, Patients

by

New York Oncology Hematology is notifying 128,400 employees and patients that their patient data may have been breached, after 15 employees fell victim to a phishing campaign in April. The phishing emails were highly targeted, appearing...

AMIA Calls for Federal Alignment of Health Data Privacy Policies

by

The American Medical Informatics Association is calling on the Trump Administration to better align data privacy policies from both the health and consumer sectors. In a letter to the National Telecommunications and Information...

Hospital Leaders Feel Underprepared for Cybersecurity Threats

by

About 75 percent of providers and 62 percent of administrators feel underprepared to face cybersecurity risks, due to staffing, training, and awareness, according to a new report from medical device manufacturer Abbott and the Chertoff...

Homeland Security Gains Cybersecurity Agency with New Legislation

by

The House of Representatives unanimously passed legislation on Monday, establishing the Cybersecurity and Infrastructure Security Agency with the Department of Homeland Security. The Senate passed the bill in October, and it now heads to...

Ransomware Attack on May Eye Care Breaches 30K Patient Records

by

Pennsylvania-based May Eye Care Center and Associates reported a breach of 30,000 patient records after falling victim to a ransomware attack on July 29. The ransomware infected May Eye Care’s server, compromising its electronic...

Healthcare’s Dependence on Fax Machines Poses Risk to Health Data

by

While the healthcare sector has some of the most advanced technology available, it’s oft perplexing to discover that about 75 percent of all healthcare communications are still processed by the antiquated fax machine. Security...

UK NHS Releases Guidance on Instant Messaging Apps in Healthcare

by

The United Kingdom National Health Service released new instant messaging guidelines for clinicians in the acute care setting, including privacy policies for sharing patient data. The guidance follows a damning CommonTime report that...

VUMC Fights Healthcare Phishing with Multi-Factor Authentication

by

The healthcare sector has remained a primary target for phishing attacks in recent years, with highly targeted viruses like SamSam and Ryuk wreaking havoc on the industry. In fact, one in every hundred emails sent globally has malicious...

Phishing Attacks Breach Data of 42K Florida Patients for 3 Months

by

Florida-based Health First notified 42,000 patients that their personal data may have been exposed for three months after several employees fell victim to phishing attacks. The breach was reported to the Department of Health and Human...

SSNs, Tax Data Exposed in Healthcare.gov Health Data Breach

by

Partial Social Security numbers (SSNs), immigration status, and tax information might have been stolen as a result of the health data breach on the Healthcare.gov portal last month. In October, CMS admitted to a breach of...

NIH Reboots Genomic Data Access After Patient Privacy Fears Eased

by

The National Institutes of Health (NIH) has resumed public access to its genomic summary results after restricting access for ten years over patient privacy concerns. Genomic summary results “convey information relevant to...

HITRUST’s New Threat Catalogue Key Component of Risk Analysis

by

The Health Information Trust Alliance (HITRUST) has released its threat catalogue that provides healthcare organizations and other firms with visibility into cyber risks to their information, assets, and operations. The HITRUST threat...

Health Data Breach Compromised PHI on 566K CNO Customers

by

CNO Financial Group reported to OCR on Oct. 25 that a breach compromised PHI on 566,217 individuals. CNO Financial Group’s largest unit, Bankers’ Life, issued a statement describing the breach. The group discovered...

Cybersecurity Vulnerabilities Flagged in Roche Handheld Devices

by

ICS-CERT is warning about cybersecurity vulnerabilities in Roche point-of-care handheld medical devices. The devices, which go by the names Accu-Chek and CoaguChek, suffer from improper authentication, OS command injection, unrestricted...

NJ Fines Vendor Behind Virtua Healthcare Data Breach $200K

by

New Jersey is slapping a $200,000 fine on a defunct Georgia-based medical transcription company that caused the Virtua Medical Group breach impacting more than 1,650 individuals in 2016. The $200,000 fine includes $191,492.00 in civil...

X

SIGN UP and gain free access to articles, white papers, webcasts and exclusive interviews on

HIPAA Compliance
BYOD
Cybersecurity
Data Breaches
Ransomware

Our privacy policy


no, thanks

Continue to site...