Cybersecurity

Arkansas Hospital Notifies Patients of Healthcare Data Breach

by Jill McKeon

Arkansas-based Howard Memorial Hospital (HMH) began notifying patients of a healthcare data breach. On December 4, HMH discovered the suspicious activity and “allegations made by an unknown actor...

Louisiana Health System Notifies 270K of Healthcare Data Breach

by Jill McKeon

In late December, Louisiana-based Lake Charles Memorial Health System (LCMHS) began notifying 269,752 individuals of a healthcare data breach. According to the notice, the breach occurred between...

Pro-Russian Hacktivist Group KillNet Poses Threat to US Healthcare Cybersecurity

by Jill McKeon

The Health Sector Cybersecurity Coordination Center (HC3) issued an analyst note about KillNet, a pro-Russian hacktivist group that is known to be a threat to the US healthcare sector. The group has...

New Version of HITRUST CSF Helps Healthcare Tackle Emerging Cybersecurity Threats

by Jill McKeon

HITRUST plans to release version 11 of its cybersecurity framework (CSF) in January with new and improved features for managing emerging cybersecurity threats and reducing certification efforts, the...

Key Medical Device Security Requirements Included in Omnibus Bill

by Jill McKeon

The House and Senate Appropriations Committees released the text of an omnibus appropriations bill that would keep the government funded through September 30, 2023. The document is more than 4,000...

MA Executive Order Confronts Increasing Cybersecurity Threats

by Sarai Rodriguez

Massachusetts Governor Charlie Baker has signed an executive order aiming to protect infrastructure organizations from the overall increase in cybersecurity threats. Led by the Secretary of the...

Citrix Releases Patches For Cybersecurity Vulnerability Used to Target Healthcare

by Jill McKeon

Citrix released patches for a critical zero-day cybersecurity vulnerability (CVE-2022-27518) in its Application Delivery Controller (ADC) and Gateway platforms. HHS knows of healthcare entities that...

Healthcare Cybersecurity Measures Must Go Beyond Perimeter Security

by Sarai Rodriguez

An uptick in cyberattacks across critical infrastructure organizations is causing organization leaders to bolster their security postures, going beyond basic perimeter security. Healthcare...

CHIME, AEHIS Provide Feedback on Senator Warner’s Cybersecurity Policy Options Paper

by Jill McKeon

The College of Healthcare Information Management Executives (CHIME) and the Association for Executives in Healthcare Information Security (AEHIS) provided their feedback on Senator Mark R....

HC3 Explores Cybersecurity Implications of Automation in Healthcare

by Jill McKeon

The Health Sector Cybersecurity Coordination Center (HC3) issued a detailed brief regarding automation and its impacts on healthcare cybersecurity and beyond. HC3 defined automation as “[t]he...

HC3: Royal Ransomware Impacts Healthcare Sector

by Jill McKeon

A new analyst note from the Health Sector Cybersecurity Coordination Center (HC3) shed light on Royal ransomware, a human-operated ransomware variant first observed in September 2022. “Due to...

3 Trends From the HIMSS Healthcare Cybersecurity Forum

by Jill McKeon

Experts gathered in Boston on December 5 and 6 for the HIMSS Healthcare Cybersecurity Forum to explore topics such as risk quantification, clinical perspectives on cybersecurity, and medical device security. Speakers included leaders from...

AHA Shares Recommendations Regarding Cybersecurity Policy Proposals

by Sarai Rodriguez

Hospitals and healthcare systems have implemented the necessary steps to protect patients and defend their networks from cyberattacks, but they need future support through cybersecurity policies to...

Balancing Digital Transformation With Healthcare Cybersecurity

by Jill McKeon

BOSTON, Mass. As organizations continue to digitally transform their ecosystems to enable new operations and care delivery models, healthcare cybersecurity concerns must remain top-of-mind. During a...

3 Strategies for Healthcare Merger, Acquisition Cybersecurity Due Diligence

by Jill McKeon

Healthcare merger and acquisition (M&A) revenue reached a record high in the second quarter of 2022, as more healthcare organizations sought to join forces, improve quality of care, and lower healthcare costs. Conducting due diligence...

CISA, FBI Alert Healthcare Sector of Cuba Ransomware Tactics

by Sarai Rodriguez

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released a joint cybersecurity advisory to warn critical infrastructure organizations of...

CommonSpirit Ransomware Attack Impacted Patient Data at Virginia Mason Franciscan Health

by Jill McKeon

Following a ransomware attack that had varying impacts across CommonSpirit Health facilities, the health system has issued a breach notice to patients of Virginia Mason Franciscan Health in Washington...

Weak Connected Medical Device Security Increases Cyberattack Threats

by Sarai Rodriguez

Medical device security continues to be an issue for healthcare organizations, especially as the threat of cyberattacks increases in the industry. The medical internet of things (IoT) has...

New Connected Device Security Maturity Model Helps Orgs Strengthen Cybersecurity

by Jill McKeon

Connected device security company Ordr published a maturity model to help healthcare organizations evaluate and improve the security of their connected devices. The guide is broken down into five...

Healthcare Industry Remains a Top Victim of Ransomware Attacks

by Sarai Rodriguez

Ransomware attacks continue to be the most prolific threat that organizations face across all infrastructure verticals, with the healthcare sector as a top target, according to the GuidePoint...