Why Healthcare Security Matters

ronjor · Feb 5, 2019

Settlement Reached in Community Health Systems Breach Suit

Marianne Kolbasuk McGee (HealthInfoSec) February 5, 2019
A proposed $3.1 million settlement has been reached in a data breach class action lawsuit against Community Health Systems stemming from a 2014 cyberattack that affected 4.5 million individuals.
Click to expand...

ronjor · Feb 5, 2019

Healthcare by 2028 will be doctor-directed, patient-owned and powered by visual technologies

Evan Nisselson 05 Feb 2019
Over the next 10 years, healthcare workflows will become mostly digitized, with wide swaths of personal data captured and computer vision, along with artificial intelligence, automating the analysis of that data for precision care. Much of the digitized data across healthcare will be visual and the technologies that capture and analyze it are visual technologies.
Click to expand...

guest · Feb 6, 2019

Ransomware Attack on Connecticut Provider Impacts 24,000 Patients
February 5, 2019
https://healthitsecurity.com/news/ransomware-attack-on-connecticut-provider-impacts-24000-patients

Connecticut-based optometrists Dr. Thomas DeLuca, Dr. Anthony Marciano & Associates recently began notifying about 23,578 patients that their personal data was potentially breached during a ransomware attack.

On November 29, the eye specialist discovered a ransomware attack on its servers. Officials said they immediately acted to stop the cyberattack from proliferating. Further, they were able to restore the network using clean backup files, over the course of three days, the eye specialist told local news outlet Citizen’s News.
“I had good security, I have a good company, I don’t know how it got through,” Deluca told Citizen’s News.

In response to the ransomware, the optometrist office closed all remote access the network, installed enhanced anti-virus software, and implemented ransomware protection. Further, the office was able to leverage its cyber insurance to help with costs associated with breach notifications.
Click to expand...

ronjor · Feb 6, 2019

As threats proliferate, so do new tools for protecting medical devices and hospitals

Jonathan Shieber @jshieber 06 Feb 2019
Six months after an episode of “Homeland” showed hackers exploiting security vulnerabilities in the (fictional) Vice President’s pacemaker, Mike Kijewski, the founder of a new startup security company called Medcrypt, was approached by his (then) employers at Varian Medical Systems with a unique problem.
Click to expand...

ronjor · Feb 6, 2019

Bolstering the Cybersecurity of Medical Devices

Marianne Kolbasuk McGee (HealthInfoSec) • February 6, 2019
ICU Medical's Chaitanya Srinivasamurthy and Marshall Fryman Discuss Critical Steps
Click to expand...

ronjor · Feb 7, 2019

Microsoft rolls out healthcare bot service, new health-record integration feature

By Mary Jo Foley for All About Microsoft | February 7, 2019
Microsoft is continuing to focus heavily on the healthcare vertical with new healthcare-related bot service, records-integration and healthcare-worker-targeted Teams capabilities.
Click to expand...

ronjor · Feb 7, 2019

HIMSS19: Cybersecurity in the Spotlight

Marianne Kolbasuk McGee (HealthInfoSec) • February 7, 2019
A Sampling of What's Slated for Health IT's Biggest Annual Show
Click to expand...

ronjor · Feb 8, 2019

EHR Vendor Greenway Gets Hefty Fine for False Claims

Marianne Kolbasuk McGee (HealthInfoSec) • February 7, 2019
For the second time, the Department of Justice has imposed a substantial fine on an electronic health records software vendor in a case that involves data accuracy and integrity issues that could affect patient safety.
Click to expand...

guest · Feb 8, 2019

NHS extends trials of digital identity system
The NHS in England is working with external organisations in new pilots to test its secure online login system for healthcare
February 8, 2019
https://www.computerweekly.com/news/252457283/NHS-extends-trials-of-digital-identity-system

The NHS has expanded a pilot programme for its new digital identity scheme to include external organisations that will need to connect to the system.
The programme, known as NHS Login, aims to allow patients to securely access online health records and services through a standard, nationwide system. It has already been tested with 3,400 patients across England as part of the new NHS App pilot, which began last October.

From April 2019, the NHS App project will also begin to work with other health and care organisations and suppliers to connect them to the app, according to NHS Digital.
Click to expand...

ronjor · Feb 8, 2019

Cottage Health Hit With $3 Million HIPAA Settlement

Marianne Kolbasuk McGee (HealthInfoSec) February 8, 2019
The U.S. Department of Health and Human Services has hit a California-based healthcare provider with a $3 million HIPAA settlement related to two breaches involving misconfigured IT. It's the latest in a recent series of hefty penalties issued in HIPAA cases.
Click to expand...

ronjor · Feb 10, 2019

Medical chatbots could help doctors but won't replace them, as I learned during a recent bout of food poisoning

Christina Farr | @chrissyfarr 10 Feb 2019
Sutter Health and Ada Health are teaming up for a new symptom-checking chatbot, which will roll out next week.
I got an early look.
Here's how it went.
Click to expand...

ronjor · Feb 11, 2019

Health Data Security: The Most Promising Technologies

Kolbasuk McGee (HealthInfoSec) February 11, 2019
Several technologies playing increasingly critical roles in mitigating the potential impact of security incidents in healthcare, say Ron Mehring, CISO at Texas Health Resources, and Axel Wirth of Symantec
Click to expand...

.

guest · Feb 12, 2019

Cyberattacks can cost APAC healthcare firms $23.3M
February 12, 2019
https://www.zdnet.com/article/cyberattacks-can-cost-apac-healthcare-firms-23-3m/

It found that 42 percent of healthcare organisations adopted "a tactical view" of cybersecurity to safeguard the company against attacks, with 19 percent turning to cybersecurity as a business differentiator and digital transformation enabler.

In the event of a cyberattack, a large healthcare organisation could incur an average of US$23.3 million in economic losses, while a midsize company could lose an average US$17,000.
Microsoft's Asia regional business lead for worldwide health Keren Priyadarshini concurred, noting that healthcare records were highly personal and sensitive and security breaches could be detrimental to healthcare organisations.
Click to expand...

guest · Feb 12, 2019

Doctors snooped into Humboldt Broncos patient records, privacy commissioner finds
February 12, 2019
https://nationalpost.com/news/canad...os-patient-records-privacy-commissioner-finds

Saskatchewan’s privacy commissioner has found several people inappropriately gained access to the electronic health records of the Humboldt Broncos team members involved in a deadly bus crash last April.

From April 9, 2018, to May 15, 2018, the health agency detected at least seven users, mostly doctors, accessed the system to view the profiles of up to 10 patients.
The reports said that eHealth reported the breaches to the privacy commissioner.

“You are entitled to access when you have a need to know, not an anticipated need, not, ’Gee, I might like to know,” he explained.
The privacy commissioner also recommended that the organization comply with a need-to-know principle rather than a circle-of-care concept and that users of eHealth be made to regularly review their training.
Click to expand...

ronjor · Feb 13, 2019

Healthcare email fraud: Attack attempts jump 473% over two years

Help Net SecurityFebruary 13, 2019
Healthcare email fraud: Attack attempts jump 473% over two years
Click to expand...

guest · Feb 15, 2019

Major privacy breach: students could access hospital medical records
February 15, 2019
https://www.dutchnews.nl/news/2019/...udents-could-access-hospital-medical-records/

Students working for extra cash at Amsterdam’s OLVG hospital group have for years been given complete access to the medical records system, allowing them to read personal information about friends, family and famous people, the Volkskrant said on Friday.

A mistake in the software meant that all students were able to access confidential files because they were supposed to be able to work anywhere within the hospital.
Experts told the Volkskrant that the loophole again highlights how difficult it is to ensure secrecy when using electronic patient records.

Concerns about privacy have been one of the major brakes on developing a nationwide digital medical record system in the Netherlands. In 2011 the upper house of parliament pulled the plug on a €300m project to introduce such a system due to privacy concerns.
Click to expand...

Minimalist · Feb 15, 2019

Business Email Compromises: The Growing Threat in Healthcare

Business email compromise attacks are becoming far more common in the healthcare sector, says Rod Piechowski of the Healthcare Information and Management Systems Society.
Click to expand...

https://www.databreachtoday.com/int...mpromises-growing-threat-in-healthcare-i-4257

ronjor · Feb 15, 2019

Health and Safety Incidents Become Biggest Loss Driver for Organizations

February 15, 2019
Health and safety incidents have become the leading financial loss drivers for businesses around the globe, with cumulative losses now outstripping the costs of more high-profile disruptions such as cyber-attacks or IT outages.
Click to expand...

guest · Feb 16, 2019

CHI Health officials say virus introduced to health system's network is believed to be 'fully contained'
February 15, 2019
https://www.theindependent.com/news...cle_c42d94de-37cd-5d86-a2a0-3307cb38cb69.html

Dr. Cliff Robertson, CHI Health’s chief executive, said that this week, a device brought in by a third-party vendor introduced a virus, also known as malware, into the health system’s network.

The virus affected some hospitals and clinics within the health care system Tuesday and Wednesday, he said. But he stressed that it did not result in an external breach or hack of patient information or disrupt patient care.
Robertson said Wednesday afternoon that “we believe we now have fully contained it.”

Meanwhile, a team is working to test and fire up the devices that were shut down, Robertson said. That process may take a couple of days. The primary concern is to make sure that the malware has been eradicated and that the devices are sterilized before they’re reconnected.
Click to expand...

guest · Feb 16, 2019

Data breach could've exposed patient info at Hampton Roads Community Health Center
February 15, 2019
https://www.wavy.com/news/health/da...pton-roads-community-health-center/1786493138

A health care service provider in Portsmouth is the latest victim of a data security breach.

The Hampton Roads Community Health Center said someone got access to their digital files and patients' personal information may have been compromised.
"That information is worth a whole lot more money. Those records might be worth $25-$50 per record,” said Jeri Prophet.

Prophet owns Intellect Techs, an information technology service company in Virginia Beach. She said data breaches happen every day.
"You don't have to be a skilled cyber attacker anymore. You can pay a small fee, go out and download these malware payloads and you can launch them just by reading some directions.”
Click to expand...

Notice (PDF - 103 KB): https://www.hrchc.org/uploads/1/2/2/8/122895695/notice_of_data_privacy_event.pdf

[...]
During our investigation, we determined that the files possibly contained: first name, last name, gender,
date of birth, health plan(s), plan member identification number(s), and medical condition. In some cases,
the files may have contained your address, social security number, credit card information or driver’s
license number.
Click to expand...

Note: the data on the server was unencrypted.

guest · Feb 16, 2019

Ministry for Children forced to apologise after social worker tries to access private medical records
February 16, 2019
https://www.tvnz.co.nz/one-news/new...orker-tries-access-private-medical-records-v1

The Ministry for Children, Oranga Tamariki, has been forced to apologise to a foster family after one of its social workers tried to access their private medical records.

The incident occurred after a foster child tried to attack them with a knife. However, the family says the attempted privacy breach has been even more traumatic.
"As much as I felt like I was the victim of the attack, I felt more of a victim in that moment than I had ever in that attack. I felt very violated and really, really upset at that I burst into tears when I heard that."

"I just couldn't believe that was possible and they should be able to do that. I thought your medical information was yours and I couldn't believe that would happen," he said.
Click to expand...

ronjor · Feb 17, 2019

Statistician raises red flag about reliability of machine learning techniques

Georgina Torbet Posted on 02.17.19
Dr Genevera Allen, associate professor of statistics, computer science, and electrical and computer engineering Rice University in Houston, Texas has discussed this topic at a press briefing and at a scientific conference, the 2019 Annual Meeting of the American Association for the Advancement of Science (AAAS). She warned that researchers in the field of machine learning have spent so much time developing predictive models that they have not devoted enough attention to checking the accuracy of their models, and that the field must develop systems which can assess the accuracy of their own findings.
Click to expand...

ronjor · Feb 18, 2019

Legislation Would Stiffen Penalties for Ransomware Attacks

By Associated Press on February 18, 2019
Using ransomware to hold computers hostage would draw stiffer penalties under legislation — prompted in part by attacks on Maryland hospitals over the past few years — state lawmakers are considering.
The legislation, which would enforce tougher penalties for those convicted of ransomware crimes, was spurred by attacks like those on the University of Maryland Medical System in 2018 and on the Salisbury Police Department in January.
Click to expand...

guest · Feb 18, 2019

mood said: ↑

Alaska public assistance agency discloses data breach from Trojan horse virus
The breach, which may have exposed the personal information at least 500 people, occurred after a computer was infected with the malware.
June 29, 2018
https://statescoop.com/alaska-public-assistance-agency-discloses-data-breach-from-trojan-horse-virus
Click to expand...

Malware attack affected 100k Alaskan households back in April 2018
February 17, 2019
https://www.2-spyware.com/malware-attack-affected-100k-alaskan-households-back-in-april-2018

It seems that an infamous Zeus virus,[1] apparently relaunched by Russian attackers, impacted more than 100 000 households in Alaska in April 2018. As the Department of Health and Social Services has reported, the affected ones include the users of the Division of Public Assistance programs, including such programs as Medicaid and SNAP.[2]

At first, it was believed that the breach affected only 500 Alaska citizens, but the attack was examined more thoroughly and new findings were made
Click to expand...

guest · Feb 18, 2019

2.7 Million Health-Related Calls, Sensitive Info Exposed for Six Years
February 18, 2019
https://www.bleepingcomputer.com/ne...d-calls-sensitive-info-exposed-for-six-years/

A server used to store real-time recordings of phone calls made to the 1177 Swedish Healthcare Guide service for health care information was found completely exposed to the Internet, with no user or password to protect it.

As IDG's Lars Dobos says, the millions of call recordings were left on an open web server that could be accessed with no password, with the conversations going back to 2013, with around 170,000 of them left out in the open.
While recording the calls is not something unusual, the fact that the calls have been saved on an exposed and unprotected server without any sort of authentication in place is definitely very serious, considering GDPR regulations and Swedish patient protection laws.

During a phone call with Dobos, the CEO of Voice Integrate Nordic, Tommy Ekström, stated that "This is catastrophic, it's sensitive data. We had no idea that it was like this. We will, of course, review our systems and check out what may have happened."
Click to expand...

Log in or Sign up

Why Healthcare Security Matters

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

Minimalist Registered Member

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

Log in or Sign up

Why Healthcare Security Matters

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

Minimalist Registered Member

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

Useful Searches