Why Healthcare Security Matters

"FDA requires medical devices be secured against cyberattacks

The Food and Drug Administration will now require medical devices meet specific cybersecurity guidelines after years of concerns that a growing number of internet-connected products used by hospitals and healthcare providers could be hit by hacks and ransomware attacks.

Under FDA guidance issued this week, all new medical device applicants must now submit a plan on how to “monitor, identify, and address” cybersecurity issues, as well as create a process that provides “reasonable assurance” that the device in question is protected. Applicants will also need to make security updates and patches available on a regular schedule and in critical situations, and provide the FDA with “a software bill of materials,” including any open-source or other software their devices use..."

https://us.cnn.com/2023/03/29/tech/fda-medical-devices-secured-cyberattacks

 

"Data of 5.82M PharMerica patients stolen, accessed during cyberattack

More than 5.81 million patients tied to PharMerica have been notified that their data was accessed and stolen during a March cyberattack. The long-term care pharmacy solution provider reported the breach to the Office of the Maine Attorney General on May 12...

The forensics showed that threat actors accessed the provider’s systems for two days and exfiltrated patient data during the dwell time. The stolen data included patient names, contract information, Social Security numbers, prescriptions, and health insurance information..."

https://www.scmagazine.com/news/ransomware/5-82m-pharmerica-patients-stolen-accessed-cyberattack

 

Eyes : Luxottica confirms 2021 data breach after info of 70M leaks online

Bleepingcomputer - May 19, 2023
https://www.bleepingcomputer.com/ne...1-data-breach-after-info-of-70m-leaks-online/

"Luxottica has confirmed one of its partners suffered a data breach in 2021 that exposed the personal information of 70 million customers after a database was posted this month for free on hacking forums.

Luxottica is the world’s largest eyewear company, glasses, and prescription frames maker, and the owner of popular brands like Ray-Ban, Oakley, Chanel, Prada, Versace, Dolce and Gabbana, Burberry, Giorgio Armani, Michael Kors, and many other. The company also operates Eyemed, a vision insurance company in the US."


See also https://haveibeenpwned.com/PwnedWebsites#Luxottica

..........

 

Interesting article. I think a lot of folks misunderstand how some of this works.