Health IT Security and HIPAA News

Enloe Medical Remains in EHR Downtime 2 Weeks After Cyberattack

by

Enloe Medical Center in Chico, California is still attempting to recover from a ransomware attack that struck on January 2. More than two weeks after the initial attack, the provider continues to care...

Health Plans Struggle with HIPAA Compliance, Unprepared for Audit

by

Many health plan group sponsors are struggling to remain or are not fully compliant with HIPAA rules. Further, those same healthcare organizations are not prepared for a HIPAA audit, according to new...

Cybersecurity Impact of Microsoft’s End to Windows 2007 Support

by

Microsoft will end its support for Windows 7, Windows Server 2008, and 2008 R2 on January 14, marking the end of regular security updates. Given that 56 percent of healthcare still rely on Windows 7,...

Feds Alert to Ongoing Cyberattacks on Unpatched Pulse VPN Servers

by

Pulse Secure VPN servers are being exploited with cyberattacks looking to exploit known vulnerabilities in its remote code execution (RCE), according to an alert from the Department of Homeland...

Hackers Demand Ransom From Patients After Breaching Florida Clinic

by

Current and former patients of Richard Davis, MD, who operates The Center for Facial Restoration, have received ransom demands from a cybercriminal who hacked the clinic's server. Other providers...

DHS Alerts to Citrix Server Vulnerabilities, Urges Remediation

by

The Department of Homeland Security is urging organizations to secure vulnerabilities found in certain Citrix servers through its Application Delivery Controller and Gateway. Security researchers have...

Could Patient Privacy Awareness Drive Health IT Innovation in 2020?

by

The past year in health IT security was one of the worst seen in recent years, with multiple breaches each impacting several millions of patients. Patients are also growing increasingly aware of their...

Data of 50K Alomere Health Patients Exposed by Employee Email Hack

by

Minnesota-based Alomere Health is notifying 49,351 patients that their medical data was potentially exposed during a hack on two employee email accounts. Hospital staff first discovered unauthorized...

Is Healthcare Prepared to Respond to Cyber Threats Beyond Ransomware?

by

The last few months of cyberattacks, especially ransomware incidents, demonstrated healthcare providers aren’t fully prepared for the new age of sophisticated threats. As the Department of...

Consumer Adoption of Health Tech Slowed by Privacy, Security Concerns

by

While more than half of American consumers believe that technology can shed light on their healthcare and foster strong relationships with their providers, privacy and security concerns have a direct...

FBI Alerts to Rise in Maze Ransomware, Extortion Attempts

by

The FBI recently began warning the private sector of a rise in Maze ransomware attacks, where the cybercriminals pose as legitimate security vendors or government agencies to encrypt and steal data. In...

HSCC Tells HHS: Include Patching in Stark Law Cybersecurity Donations

by

The Department of Health and Human Services’ proposed changes to the Physician Self-Referral Law (Stark Law) and the Federal Anti-Kickback Statute should include patching and update language in...

LifeLabs Hit With Several Lawsuits Over Data Breach of 15M Patients

by

LifeLabs is potentially facing a class-action lawsuit after a several civil lawsuits were filed against the testing giant in a British Columbia Court, following reports that the data of 15 million...

Cyber Threats Behind the Biggest Healthcare Data Breaches of 2019

by

Healthcare faced some of the biggest data breaches of recent history in 2019, as hackers shifted tactics to increase the success rate of financially motivated attacks. At the start of last year, trojan...

Georgia Revives Patient Breach Lawsuit Against Athens Orthopedic

by

The Supreme Court of Georgia has revived a patient data breach lawsuit against Athens Orthopedic Clinic, by unanimously reversing a Court of Appeals decision to dismiss the case. In July 2016, Athens...

New Mexico Hospital Finds Malware Infection on Digital Imaging Server

by

New Mexico-based Roosevelt General Hospital discovered malware on the digital imaging server of its radiology department, which possibly allowed hackers to view the digital medical images of about 500...

DCH Health Faces Federal Lawsuit After 10-Day Ransomware Attack

by

Alabama-based DCH Health System is facing a federal lawsuit following a ransomware attack that disrupted care for non-critical patients for about 10 days in October, first reported by local news outlet...

Number of Exposed PACS Medical Images Increasing, US Biggest Culprit

by

A 60-day update on the number of Picture Archiving and Communication Systems (PACS) images left unprotected online has found a 60 percent increase in exposed medical data, to about 1.19 billion images,...