Why Healthcare Security Matters

ronjor · Apr 7, 2017

Ransomware Attack on Pediatric Practice Exposes 55,447 Patients' Information

By Jeff Goldman | Posted April 07, 2017
While the company was able to avoid falling victim to the ransomware, the attackers may have been able to access patient data.
Click to expand...

ronjor · Apr 7, 2017

A huge trove of patient data leaks, thanks to telemarketers' bad security

By Zack Whittaker for Zero Day April 7, 2017 -- 17:00 GMT (10:00 PDT)
The data of almost a million patients with diabetes and other medical ailments has been secured.
Click to expand...

ronjor · Apr 14, 2017

Health Savings Account Fraud: The Rapidly Growing Threat

Vitali Kremez 4/14/2017
As income tax season comes to a close, financially-motivated cybercriminals are honing new tactics for monetizing medical PII.
Click to expand...

Minimalist · Apr 15, 2017

Your Electronic Medical Records Could Be Worth $1000 To Hackers

How much is your life worth to hackers? On the black market, the going rate for your social security number is 10 cents. Your credit card number is worth 25 cents. But your electronic medical health record (EHR) could be worth hundreds or even thousands of dollars.

EHRs offer significant benefits compared to previous paper-based systems and have been adopted by over 96% of critical care hospitals and over 83% of regular hospitals. While digitization overcomes many of the inefficiencies and fragmentation that plagued healthcare providers, your patient records are now also more susceptible to hacking and theft.
Click to expand...

https://www.forbes.com/sites/mariya...-medical-records-can-be-worth-1000-to-hackers

ronjor · Apr 18, 2017

Securing Medical Devices – The Need for a Different Approach – Part 1

Richard Staynings - April 18, 2017
When I ask the question of Healthcare CIOs and CISOs “What keeps you up at night?” one of the most common answers I receive – after the usual jokes about indigestion, or the snoring spouse, is the problem of what to do about securing medical devices in our hospitals.
Click to expand...

Minimalist · Apr 20, 2017

Tanium CEO tacitly admits using hospital data in demos, sort of

Following a report by the Wall Street Journal that the security vendor Tanium used a hospital's live network as a demonstration platform on sales calls and even revealed private hospital data in a publicly posted demonstration video, Tanium CEO Orion Hindawi has admitted that mistakes were made in handling data from El Camino Hospital's network. Hindawi was vague about whether the company had live access to the network, but in a blog post late yesterday, he said that the data was from "this particular customer's demo environment" and that Tanium did not—and should not—have remote access to customers' security data except in a very few cases where customers had granted access. But this appears to have been a change made after Tanium lost access to the El Camino Hospital network in 2015.
Click to expand...

https://arstechnica.com/security/20...-admits-using-hospital-data-in-demos-sort-of/

hawki · Apr 21, 2017

"Turns out, pacemaker security is terrifying"

ronjor said: ↑

Cybersecurity Vulnerabilities Identified in St. Jude Medical's Implantable Cardiac Devices and Merlin@home Transmitter: FDA Safety Communication
Click to expand...

"Turns out, pacemaker security is terrifying

Be still my backdoored heart."

https://www.engadget.com/2017/04/21/pacemaker-security-is-terrifying/

hawki · Apr 24, 2017

"Healthcare records for sale on Dark Web..."

[Notwithstanding it's simple title -- the linked article is an extensive and highly informative presentation of the subject of the extent of healthcare record theft, federal compliance requirements, and best practices to prevent it.]

http://www.networkworld.com/article...-records-for-sale-on-dark-web.html#tk.rss_all

Minimalist · Apr 25, 2017

Hackers are going for your healthcare data

Every eighth person in England has had their healthcare data breached. This is the conclusion of a new report just released by Accenture. Based on a poll of 1,000 people it says that more than half of those who experienced a data breach (56 percent), were in fact, victims of medical identity theft.
Click to expand...

https://betanews.com/2017/04/25/hackers-healthcare-data/

ronjor · Apr 26, 2017

HHS Hits CardioNet with $2.5M HIPAA Settlement Fee

Dark Reading Staff 4/26/2017
The US Department of Health and Human Services slapped the mobile cardiac monitoring service with fee after breach of customer health data.
Click to expand...

Minimalist · Apr 27, 2017

Lack of security talent afflicts healthcare

Reality has bitten healthcare hard in the last year, with dire vulnerabilities in medical devices bubbling to the surface, malware infections affecting patient care at a number of facilities, and the realization that nowhere is the lack of information security professionals more pressing than in the medical industry.
Click to expand...

https://threatpost.com/lack-of-security-talent-afflicts-healthcare

ronjor · Apr 29, 2017

How to securely deploy medical devices within a healthcare facility

Zeljka Zorz - Managing EditorApril 28, 2017
The risks insecure medical devices pose to patient safety are no longer just theoretical, and compromised electronic health records may haunt patients forever.
Click to expand...

ronjor · May 1, 2017

Ransomware's biggest target is the healthcare sector

By Sead Fadilpašić
The healthcare sector is under greater threat than all others, it was also added, as 72 percent of all malware incidents targeted this sector.
Click to expand...

hawki · May 3, 2017

"Biggest security threat to US healthcare? Loose lips and lost hardware...

US healthcare breach incidents have dropped off in the year to date after hitting an all-time high in 2016...

Unauthorised disclosures are now the leading cause of breaches, accounting for nearly 40 per cent of breaches in 2016. These disclosures can take the form of anything from lost or stolen computers to the accidental mailing of personal information..."

https://www.theregister.co.uk/2017/05/03/us_healthcare_breaches_declining/

ronjor · May 3, 2017

Healthcare Breaches Hit All-Time High in 2016

Kelly Sheridan 5/3/2017
More than 300 healthcare businesses reported data breaches in 2016, but a drop in leaked records put fewer Americans at risk.
Click to expand...

Minimalist · May 9, 2017

Website Flaw Let True Health Diagnostics Users View All Medical Records

Over the past two weeks readers have pointed KrebsOnSecurity to no fewer than three different healthcare providers that failed to provide the most basic care to protect their patients’ records online. Only one of the three companies — the subject of today’s story — required users to be logged in order to view all patient records.
Click to expand...

https://krebsonsecurity.com/2017/05...h-diagnostics-users-view-all-medical-records/

ronjor · May 12, 2017

Sobering Thoughts When a Connected Medical Device Is Connected to You

By Jim Ivers on May 12, 2017
I recently had reason to spend an overnight visit in the hospital. When friends and family left me late in the evening I was confronted with a subject that I had considered professionally but never had to face personally: the connected medical device.
Click to expand...

ronjor · May 19, 2017

Medical Devices Infected With WannaCry Ransomware

By Eduard Kovacs on May 19, 2017
Several medical device manufacturers released security advisories this week following reports that the notorious WannaCry ransomware has infected some medical devices.
Click to expand...

Minimalist · May 19, 2017

Healthcare organizations still complacent about cybersecurity

“Cybersecurity within the healthcare sector has been traditionally poor, at best,” says Michela Menting, Research Director at ABI Research. “Most organizations limit themselves to box ticking exercises, as required under data protection legislation for patient privacy. A true understanding of the risks and the requirements of comprehensive, multi-layered cybersecurity implementation is sorely lacking. When ranking barriers to technology adoption, we find that 82% of healthcare respondents did not rank privacy and data protection as a concern, and 58% did not rank cybersecurity at all.”
Click to expand...

https://www.helpnetsecurity.com/2017/05/19/healthcare-complacent-cybersecurity/

ronjor · May 25, 2017

Medical Devices Fall Short in Security Best Practices

Dawn Kawamoto 5/25/2017
More than half of medical device makers and healthcare delivery organizations anticipate an attack on their medical devices within the next 12 months, but only a smattering take significant steps to prevent it, according to a survey released today.
Click to expand...

ronjor · May 25, 2017

MolinaHealthcare.com Exposed Patient Records

Earlier this month, KrebsOnSecurity featured a story about a basic security flaw in the Web site of medical diagnostics firm True Health Group that let anyone who was logged in to the site view all other patient records. In that story I mentioned True Health was one of three major healthcare providers with similar website problems, and that the other two providers didn’t even require a login to view all patient records. Today we’ll examine a flaw that was just fixed by Molina Healthcare, a Fortune 500 company that until recently was exposing countless patient medical claims to the entire Internet without requiring any authentication.
Click to expand...

https://krebsonsecurity.com/2017/05/molinahealthcare-com-exposed-patient-records/

EASTER · May 25, 2017

ronjor said: ↑

https://krebsonsecurity.com/2017/05/molinahealthcare-com-exposed-patient-records/
Click to expand...

Important more than ever now that these HealthCare institutions JOINTLY conference ASAP and assist one another in fully upscaling the manner in which records and management of interconnected services are treated to ensure against anything similar catching them off-guard like this again.

Also it could go a long way in forming a total secure alliance by also reaching out to HealthCare service providers who many of which have not quite the same resources to protect their data in the way that must be secured from outside interference like was just experienced on a big scale.

Another interesting read again Lone Ranger.

Minimalist · May 26, 2017

Services Interrupted As Hospitals Push Fixes For WannaCry Ransomware Exploit

Sometimes it's because system administrators fear that some part of the update process could go awry and lead to service interruptions. Even when things do go as planned, there can still be unwanted complications. That's the reality five Australian hospitals are dealing with this week.

In the wake of the WannaCry outbreak, Queensland Health moved quickly to ensure that the proper protections were put in place. In addition to Windows, Citrix and clinical workflow software from Cerner was also patched. While the updates "protected the integrity of [hospital] systems and data," they have also made it difficult for some staff to access medical record systems.
Click to expand...

https://www.forbes.com/sites/leemat...ls-push-fixes-for-wannacry-ransomware-exploit

itman · May 26, 2017

About time ...........

Many manufacturers and healthcare delivery organizations (HDO) are concerned about medical device attacks, but only few have taken significant steps to address the threat, according to a study commissioned by electronic design automation solutions provider Synopsys.

The study, based on a survey of 550 individuals conducted by the Ponemon Institute, shows that 67 percent of medical device makers and 56 percent of HDOs believe an attack on the medical devices they build or use is likely to occur in the next 12 months.

In fact, roughly one-third of respondents said they were aware of cyber incidents that had a negative impact on patients, including inappropriate therapy or treatment delivery, ransomware attacks, denial-of-service (DoS) attacks, and hijacking of medical devices.

On the other hand, only 17 percent of device manufacturers and 15 percent of HDOs have taken significant steps to prevent attacks. Roughly 40 percent on both sides admitted that they haven’t done anything to prevent attacks.

Only 25 percent of device makers and 38 percent of HDOs are confident that the security mechanisms built inside devices can adequately protect patients and the clinicians who use these systems.

While mobile devices help clinicians be more efficient, approximately half of respondents believe that their use in hospitals and other healthcare organizations significantly increases security risks.
Click to expand...

http://www.securityweek.com/organizations-concerned-about-medical-device-attacks-study

Minimalist · Jun 8, 2017

Task force tells Congress health IT security is in critical condition

A congressionally mandated healthcare industry task force has published the findings of its investigation into the state of health information systems security, and the diagnosis is dire.

The Health Care Industry Cybersecurity Task Force report (PDF), published on June 1, warns that all aspects of health IT security are in critical condition and that action is needed both by government and the industry to shore up security. The recommendations to Congress and the Department of Health and Human Services (HHS) included programs to drive vulnerable hardware and software out of health care organizations. The report also recommends efforts to inject more people with security skills into the healthcare work force, as well as the establishment of a chain of command and procedures for dealing with cyber attacks on the healthcare system.
Click to expand...

https://arstechnica.com/security/20...-health-it-security-is-in-critical-condition/

Log in or Sign up

Why Healthcare Security Matters

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

hawki Registered Member

hawki Registered Member

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

hawki Registered Member

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

EASTER Registered Member

Minimalist Registered Member

itman Registered Member

Minimalist Registered Member

Log in or Sign up

Why Healthcare Security Matters

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

hawki Registered Member

hawki Registered Member

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

hawki Registered Member

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

EASTER Registered Member

Minimalist Registered Member

itman Registered Member

Minimalist Registered Member

Useful Searches