Why Healthcare Security Matters

guest · Nov 21, 2018

mood said: ↑

Apple's Health Record API released to third-party developers; is it safe?
June 7, 2018
https://www.computerworld.com/artic...sed-to-third-party-developers-is-it-safe.html
Click to expand...

Apple reportedly in talks to give veterans access to medical records on iPhones
November 20, 2018
https://www.cnet.com/news/apple-rep...eterans-access-to-medical-records-on-iphones/

Apple is in talks with the Department of Veterans Affairs to give military veterans portable access to their electronic medical records, The Wall Street Journal reported Tuesday.
Apple would create software tools to allow the VA's 9 million veterans to transfer their electronic health records to iPhones under the plans being discussed, the Journal reported.

An iOS update in the spring included a new Health Records feature that allows users to pull together records of their allergies, conditions, immunizations, lab results, medications, procedures and vitals from a variety of doctor offices.
Click to expand...

ronjor · Nov 21, 2018

How IoT medical devices save your life and threaten your privacy

By Matt Asay November 21, 2018
Consumers increasingly depend upon IoT devices to help them do everything from improving sleep to monitoring blood sugar levels. In the process, they may be giving up more privacy than expected.
Click to expand...

ronjor · Nov 26, 2018

Internal negligence to blame for most data breaches involving personal health information

Help Net Security November 26, 2018
Your personal identity may fall at the mercy of attackers on many websites, but when it comes to health data breaches, hospitals, doctors offices and even insurance companies are oftentimes the culprits.
Click to expand...

Minimalist · Nov 26, 2018

A Strong Message on Improper PHI Disclosure to News Media

In at least the fourth federal HIPAA case involving improper disclosure of patient information to the media, federal regulators have slapped a three-doctor practice in Connecticut with a financial penalty.
Click to expand...

https://www.databreachtoday.com/strong-message-on-improper-phi-disclosure-to-news-media-a-11728

ronjor · Nov 27, 2018

Ransomware infects hospitals in Ohio, West Virginia

Written by Sean Lyngaas Nov 27, 2018
The attack affected the Ohio Valley Medical Center and East Ohio Regional Hospital, Karen Janiszewski, spokeswoman for parent company Ohio Valley Health Services & Education Corp., confirmed in an email to CyberScoop. Officials did not specify what kind of ransomware caused the incident.
Click to expand...

Minimalist · Nov 27, 2018

Phishing Scams in Healthcare: A Persistent Threat

With the year nearly over, hacking attacks - especially those involving phishing and other email attacks - continue to rack up big victim counts for health data breaches reported to federal regulators in 2018.
Click to expand...

https://www.databreachtoday.com/phishing-scams-in-healthcare-persistent-threat-a-11732

ronjor · Nov 28, 2018

New Database Tracks Faulty Medical Devices Across The Globe

By Emilia Díaz-Struck/ November 25, 2018
The International Medical Devices Database empowers patients, doctors and regulators with unprecedented knowledge.
Click to expand...

ronjor · Nov 28, 2018

Data Breach Hits 2.6 Million Atrium Health Patients

By Eduard Kovacs on November 28, 2018
Hospital network Atrium Health informed patients on Tuesday that their personal information was compromised following a breach at technology solutions provider AccuDoc.
Click to expand...

ronjor · Nov 28, 2018

AWS launches Comprehend Medical, applies natural language processing to medical records

By Larry Dignan | November 28, 2018
The service, an extension of Comprehend, adds new terms and relationships, is HIPAA eligible.
The importance of the service is that it is another toward applying artificial intelligence and machine learning to healthcare.
Click to expand...

guest · Nov 30, 2018

Inspector General’s report documents security flaws at Arizona Medicare MCOs
November 29, 2018
https://www.scmagazine.com/home/sec...ents-security-flaws-at-arizona-medicare-mcos/

A recent risk assessment of information systems at two Arizona-based Medicaid managed care organizations turned up 19 vulnerabilities, according to a new report from the Department of Health and Human Services Office of the Inspector General.

“Our consolidated findings from the reviews of the MCOs show significant vulnerabilities in the MCOs’ information systems, and raise concerns about the integrity of the systems used to process Medicaid managed care claims,” the report states.
“Some of the same vulnerabilities were identified at both MCOs, suggesting that other Arizona MCO information systems may be similarly vulnerable.”
Click to expand...

Report (PDF): https://oig.hhs.gov/oas/reports/region18/181709302.pdf

guest · Nov 30, 2018

Another Healthcare Website Security Issue Revealed
November 30, 2018
https://www.inforisktoday.com/another-healthcare-website-security-issue-revealed-a-11752

In yet another sign that website security issues are far too common in the healthcare sector, Tandigm Health says a vulnerability on a physician portal potentially exposed the data of about 7,400 patients.

In a Nov. 23 notification statement, the West Conshohocken, Pa.-based coordinated healthcare company, which supports more than 1,100 primary care and specialty physicians, says it discovered on Sept. 25 a potential vulnerability in one of its websites.
[...] in a portal that primary care physicians use to access their patients' data through a password-protected web interface.
Why So Common?
So, why are website security incidents so common in healthcare?
"Because all too often [websites] don't receive the attention they deserve or someone is trying to make them easier for the user to navigate and compromising on security," McMillan contends.
Click to expand...

Notification statement (PDF): https://tandigmhealth.com/wp-content/uploads/2018/11/Final-Tandigm-Website-Notice-.pdf

ronjor · Nov 30, 2018

Amazon launches patient data-mining service to assist docs

By Lucas Mearian Senior Reporter, Computerworld | November 30, 2018
Through its Amazon Web Services platform, Amazon is offering an A.I. engine that can cull useful information from millions of unstructured electronic files, including patient electronic medical records.
Click to expand...

Minimalist · Dec 3, 2018

Rhode Island Health Provider Hit by Ransomware Attack

Thundermist Health Center is a Federally Qualified Community Health Center which serves thousands of patients from central, northern, and southern Rhode Island, in three surrounding communities: West Warwick, Woonsocket, and South County.

"We act quickly to protect patient data, limit the attack and continue to provide safe care to the patient," said Thundermist's website after the incident. "Patient and employee information was not compromised. We are open and there is little impact on patient care."
Click to expand...

https://news.softpedia.com/news/rhode-island-health-provider-hit-by-ransomware-attack-524076.shtml

ronjor · Dec 4, 2018

Why hospitals are the next frontier of cybersecurity

Ofer Schreiber, Partner, YL VenturesDecember 4, 2018
According to a report in the Journal of the American Medical Association, healthcare breaches have spiked significantly since 2010. Healthcare delivery organizations (HDOs) were the fastest growing targeted group, accounting for over 70 percent of the 2,149 breaches tracked. Another study found that HDOs were the victim of 88 percent of all ransomware attacks in U.S. industries last year and that 89 percent of studied organizations had a breach.
Click to expand...

Floyd 57 · Dec 4, 2018

Attacking big companies with ransomware is one thing, but

Hackers can also use ransomware to hold vital healthcare systems and records hostage
This became frighteningly clear during last year’s WannaCry attacks, which disrupted a third of the UK’s National Health Service organizations and infected large numbers of unsecured connected medical devices around the world
Click to expand...

is just plain evil

Some people just don't care that they're harming (or literally killing) others, feels bad man

Minimalist · Dec 4, 2018

12 States File Data Breach Lawsuit Against EHR Vendor

In a groundbreaking effort, the attorneys general of a dozen states have jointly filed a federal lawsuit against a cloud-based electronic health records vendor that reported a 2015 data breach affecting 3.9 million individuals.
Click to expand...

https://www.databreachtoday.com/12-states-file-data-breach-lawsuit-against-ehr-vendor-a-11788

Minimalist · Dec 4, 2018

Make privileged-access security a priority to protect patient data

THE increased use of electronic personal health information (ePHI), coupled with rapid advances in healthcare technology - from cloud-based applications to IoT-enabled devices to telemedicine - has created complex healthcare delivery networks that are target-rich environments for cyber attackers.
Click to expand...

https://www.businesstimes.com.sg/op...s-security-a-priority-to-protect-patient-data

guest · Dec 4, 2018

Exclusive: Supplier faces 'big penalties' after huge NHS email shutdown
December 3, 2018
https://www.hsj.co.uk/technology-an...after-huge-nhs-email-shutdown/7023950.article

A well placed senior source confirmed the company, which runs NHSmail on behalf of NHS Digital, will be penalised for the shutdown that was linked to a software upgrade which took place several weeks ago.

HSJ was also told the error should have been detected in testing or in the weeks after the software upgrade. When the failure did occur, backup systems should have kicked in, but did not.
The NHSmail system has more than 1.2 million accounts across England and Scotland and is the default email system for NHS staff. It suffered a complete shutdown at 12.30pm on Saturday.

This is not the first time NHSmail has run into difficulty under Accenture. In November 2016, a fault in the “reply all” function generated more than 840,000 additional emails, overwhelming the system and shutting some users out for several hours.
Click to expand...

ronjor · Dec 7, 2018

Does HIPAA Need to Be 'Modernized'?

Marianne Kolbasuk McGee (HealthInfoSec) December 6, 2018
AMIA, AHIMA Want to Update What's Covered Regarding Patients' Access to Their Data
Click to expand...

Minimalist · Dec 7, 2018

Another Electronic Health Records Vendor Hacked

Yet another cyberattack against a cloud-based electronic health records vendor has been revealed. This one involved a ransomware attack that potentially exposed data on 16,000 patients of a California eye clinic.
Click to expand...

https://www.databreachtoday.com/another-electronic-health-records-vendor-hacked-a-11823

guest · Dec 8, 2018

Redwood Eye Care hit with ransomware, 16,000 records encrypted
December 7, 2018
https://www.scmagazine.com/home/sec...-hit-with-ransomware-16000-records-encrypted/

The Redwood Eye Center learned on September 19, 2018 that third-party vendor IT Lighthouse that hosts Redwood’s medical records database experienced a ransomware attack that locked the server containing 16,055 the company’s customer records.
The information stored on the server included patient names, addresses, dates of birth, health insurance information, and medical treatment information, the company said in its official notification to the California attorney generals office.

“We are taking steps to change our medical record hosting vendor and enhance the security of our patient information,” Redwood said.
Click to expand...

Notification (PDF): https://oag.ca.gov/system/files/Redwood%20-%20AG%20Notification%20-%20California%2012.6.18_0.pdf

guest · Dec 11, 2018

North Texas hospital breach exposes payment info on $47,000
December 11, 2018
https://www.scmagazine.com/home/sec...ospital-breach-exposes-payment-info-on-47000/

A breach discovered September 29 at Baylor Scott & White Medical Center – Frisco may have compromised the payment information of about 47,000 patients or guarantors.
The hospital said the issue originated with a third party’s credit card processing system, prompting it to terminate credit card processing through that vendor.

“It is important to note that the hospital’s information and clinical systems were not affected, and medical information was not compromised. Social Security numbers and medical record information were not accessed,” the hospital said in an alert, noting that no other facility in the Baylor Scott & White system had been affected.

“Medical-related data breaches are lucrative because malicious actors can try to sell data to advertisers based on health conditions,” said Justin Jett, director of audit and compliance for Plixer.
Click to expand...

ronjor · Dec 12, 2018

30% of healthcare databases are exposed online

Zeljka Zorz, Managing Editor December 11, 2018
Despite the fact that electronic health records (EHR) contain extremely sensitive information about individuals, it is shockingly easy for malicious actors to get their hands on them, Intsights security researchers have discovered.
Click to expand...

guest · Dec 12, 2018

NHS could face major cybersecurity threats due to lack of investment
December 11, 2018
https://www.itproportal.com/news/nh...ersecurity-threats-due-to-lack-of-investment/

According to a number of Freedom of Information (FoI) requests that Redscan submitted to the NHS trusts, it was found that these employ one cybersecurity professionals on more than 2,500 employees. Almost a quarter of trusts (24 out of 108) have no cybersecurity qualifications, whatsoever

Many trusts spent nothing, using only NHS Digital’s Information Governance (IG) training, which is free of charge. Speaking of training, just 12 per cent of trusts have met their target of having more than 95 per cent of their staff passing IG every 12 months.

“These findings shine a light on the cyber security failings of the NHS, which is struggling to implement a cohesive security strategy under difficult circumstances,” explained Redscan director of cybersecurity, Mark Nicholls.
Click to expand...

guest · Dec 14, 2018

Ransomware strikes University of Maryland Medical System
December 14, 2018
https://www.scmagazine.com/home/sec...trikes-university-of-maryland-medical-system/

The University of Maryland Medical System was hit with a ransomware attack earlier this week that affected a small number of its medical devices offline.
About 250 of the system’s 27,000 devices were impacted by the attack, The Baltimore Sun reported. However, a hospital spokesman told The Sun the devices were not encrypted, as is the case with most ransomware, so the ransom was not paid.

The attack began on Dec. 9 at 4:30 am forcing the hospital to take its networks and devices offline by 7 am. The 250 infected devices, mainly desktop computers were quarantined and all the other equipment was put back online Monday morning, The Sun reported.
Click to expand...

Log in or Sign up

Why Healthcare Security Matters

guest Guest

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Floyd 57 Registered Member

Minimalist Registered Member

Minimalist Registered Member

guest Guest

ronjor Global Moderator

Minimalist Registered Member

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

Log in or Sign up

Why Healthcare Security Matters

guest Guest

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Floyd 57 Registered Member

Minimalist Registered Member

Minimalist Registered Member

guest Guest

ronjor Global Moderator

Minimalist Registered Member

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

Useful Searches