Healthcare Information Security

PHI

AMA: MU Secure Messaging Criteria Should Be Optional

by Elizabeth Snell

Meaningful Use secure messaging was one of several issues discussed in a blueprint created by the American Medical Association last week. The Centers for Medicare and Medicaid Services (CMS) should make the “view-download-transmit,”...

‘Small Number’ Of Laptops With PHI Missing From Ambulances

by Elizabeth Snell

Over a period of approximately three years, a “small number” of laptops have gone missing from ambulances in the Dallas area. The laptops in question disappeared between January 1, 2011, and August 29, 2014, according to the Dallas Morning...

Laptop With PHI Stolen From Ga. Health Employee’s Car

by Elizabeth Snell

The Georgia Department of Behavioral Health and Developmental Disabilities (DBHDD) announced earlier this week that a laptop containing protected health information (PHI) of approximately 3,000 patients was stolen from an employee’s car on...

Will New ‘Poodle’ Web Threat Affect Health Data Security?

by Elizabeth Snell

Cyber security is crucial for many organizations, and the healthcare industry is no different. While the most recent discovery of a security bug in numerous types of web encryption technology is not seen as serious as past threats, it’s still...

Protecting against Healthcare Data Breaches: Failed Physical Safeguards

by Elizabeth Snell

Data breaches are something that the healthcare industry is continuously working to prevent. However, computer hackers and malware attacks are often the first things that come to mind as being associated with healthcare data breaches. While this...

How valuable are medical records to identity thieves?

by Elizabeth Snell

Social security numbers and credit card numbers are often thought of as key pieces of information for thieves to have in terms of identity theft, but recent reports show that there is something worth a lot more floating around in cyberspace:...

Johns Hopkins reaches preliminary privacy breach agreement

by Patrick Ouellette

More than a year after patients filed a potential class action lawsuit against Johns Hopkins Medicine following a privacy breach, the hospital has reached a preliminary $190 million settlement. For background, former Johns Hopkins gynecologist...

Penn State Hershey Medical Center alerts 1,801 patients of breach

by Patrick Ouellette

Penn State Milton S. Hershey Medical Center began alerting 1,801 patients last week that an employee had accessed clinical data without having proper IT security protections in place. According to the Penn State statement, the employee, a clinical...

Mitigating common healthcare cloud IT security issues

by Sal Ramanan CISSP

Cyber security threats in the healthcare industry are continually on the rise and the value of an identity data set is about $50 per patient record. So what can healthcare providers do to avoid these attacks? If you look at the recent security...

FTC to define data security principles in LabMD case

by Patrick Ouellette

For good reason, healthcare organizations are weary of potential fines and audits coming from the Department of Health and Human Services (HHS) and Office for Civil Rights. But the ongoing Federal Trade Commission (FTC) v. LabMD lawsuit may have...

Boulder Community Health reviews paper PHI record exposure

by Patrick Ouellette

After a reported HIPAA violation, Boulder Community Health (BCH) of Colorado is in the process of investigating its third patient data breach since 2008, according to The Daily Camera. The context of the breach is a bit bizarre in that, unknown...

Employees file class suit against UPMC following data breach

by Patrick Ouellette

Employees affected by the University of Pittsburgh Medical Center (UPMC) data breach have filed a class action lawsuit against UPMC and its payroll vendor, Ultimate Software Group. The suit says that UPMC and the vendor breached its duty to protect...

OCR dismisses Walgreens ‘Well Experience’ HIPAA complaint

by Patrick Ouellette

The Office for Civil Rights (OCR) has officially completed its investigation into the Walgreens “Well Experience” program and dismissed the complaint filed by the activist group, Change to Win (CtW), after finding CtW’s patient privacy...

Molina Healthcare contractor mail error exposes patient data

by Patrick Ouellette

Molina Healthcare, a multi-state healthcare organization, reported on Friday that a postcard mailing error in March had resulted in 5,261 former members’ Social Security numbers being inadvertently exposed. According to the Albuquerque...

UMass Memorial Medical sends out patient data breach notices

by Patrick Ouellette

After taking nearly two months to flesh out a patient data breach involving inappropriate internal access, UMass Memorial Medical Center (UMMMC) of Worcester, Mass. announced this week that it had alerted more than 2,400 affected patients of...

Centura Health alerts 1,000 patients of phishing attack

by Patrick Ouellette

A data breach involving Mercy Regional Medical Center of Durango, Colo. exemplifies the stark reality that phishing attacks have become more complex and difficult for even the most shrewd of users to pick out. Mercy employees, according to the...

Boston Medical Center transcription service exposes PHI

by Patrick Ouellette

Once it learned that 15,000 patients’ data had been exposed on its transcription service vendor’s website, Boston Medical Center (BMC) fired MDF Transcription Services and has sent breach notification letters to patients. The website...

Health data breach roundup: Tufts Health Plan, Iowa DHS

by Patrick Ouellette

Data breaches of all different shapes, sizes and victims are being reported on an almost daily basis, so it can be difficult to stay up to date on the latest breach incidents. HealthITSecurity.com has compiled a list of the latest breaches down...

Cybersecurity hackers target Boston Children’s Hospital

by Patrick Ouellette

Hackers have made multiple attempts to infiltrate Boston Children’s Hospital within the past month, according to a Boston Globe report. The hackers’ efforts were geared toward overloading the Children’s website and potentially...

Coordinated Health data breach may impact 700 patients

by Patrick Ouellette

Coordinated Health reported this week that a data breach involving a stolen laptop belonging to an employee may have affected up to 700 patients. According to poconorecord.com, an employee in Bethlehem had left the laptop in their car and the...

X

SIGN UP and gain free access to articles, white papers, webcasts and exclusive interviews on

HIPAA Compliance
BYOD
Cybersecurity
Data Breaches
Ransomware

Our privacy policy

no, thanks