Why Healthcare Security Matters

ronjor · Aug 23, 2017

Staggering statistic posted by Microsoft.

Microsoft perspective on cyber resilience
August 23, 2017 - Microsoft Secure Blog Staff - Microsoft
This post is authored by Ann Johnson, Vice President, Enterprise Cybersecurity Group.

Example #2 – Data breaches continue to impact US healthcare industry:
Cyberattacks continue to measurably impact the healthcare industry since cybercriminals who successfully gain access to medical data could use it for conducting fraud or identity theft for lucrative purposes. Also, the personal data often includes information on a patient’s medical history, which may be used in targeted spear-phishing attacks. As of August 9, 2017, the US Department of Health and Human Services’ HIPAA Breach Reporting Tool website – often called the “wall of shame” – showed a total of 2,018 breaches since 2009. The number of individuals affected by health data breaches also has surged in recent years, from 31.5 million as of May 30, 2014, to about 175 million as of August 9, 2017.
Click to expand...

Minimalist · Aug 25, 2017

It took 14 years for this Massachusetts hospital to detect a data breach

It took a Massachusetts hospital 14 years to detect a data breach. To make matters worse, even after all that time - it wasn't the medical center itself that discovered the incident.

Tewksbury Hospital learned of the breach in the spring of 2017. It hasn't found any evidence to suggest the security incident resulted in attackers misusing patients data. Even so, it believes the event compromised the security of affected individuals' personal and medical information.
Click to expand...

https://www.grahamcluley.com/took-14-years-massachusetts-hospital-detect-data-breach/

Minimalist · Aug 26, 2017

Cyber attack causes major IT disruption affecting patients in Lanarkshire

Patient appointments have been cancelled after computer systems in hospitals and GP practices across Lanarkshire were hit by a cyber attack.

The shutdown happened around 11am. The health board at first said it was investigating but later confirmed it had been a cyber attack.
Click to expand...

http://www.heraldscotland.com/news/...led_appointments_for_patients_in_Lanarkshire/

Minimalist · Aug 26, 2017

Aetna exposed 12,000 customers' HIV statuses through envelope window

American managed health care company Aetna is in hot water for accidentally exposing the HIV statuses of 12,000 of its patients.

The breach occurred on 28 July 2017 when the company dispatched letters to some of its customers informing them of changes to their received healthcare services. As it turns out, the contents of those letters were in some cases readable from within their sealed envelopes.
Click to expand...

https://www.grahamcluley.com/oops-aetna-exposed-12000-customers-hiv-statuses-envelope-window/

hawki · Aug 30, 2017

"FDA issues recall of 465,000 St. Jude pacemakers to patch security holes

Heart patients will have to visit their doctors to have their pacemakers patched for the "voluntary" recall..."

http://www.zdnet.com/article/fda-forces-st-jude-pacemaker-recall-to-patch-security-vulnerabilities/

Minimalist · Sep 9, 2017

Hackers can remotely access and manipulate wireless syringe infusion pumps

Internet connected medical devices have increasingly become commonplace. However, such devices could potentially be hacked by cybercriminals. New vulnerabilities uncovered by a security expert show that wireless syringe infusion pumps could be remotely accessed by hackers, who could also exploit the bugs to manipulate the operations of the device.
Click to expand...

http://www.ibtimes.co.uk/hackers-ca...ulate-wireless-syringe-infusion-pumps-1638688

ronjor · Sep 13, 2017

Connected Medicine and Its Diagnosis

By Denis Makrushin on September 13, 2017. 9:00 am
Medical data is slowly but surely migrating from paper mediums to the digital infrastructure of medical institutions. Today, the data is “scattered” across databases, portals, medical equipment, etc. In some cases, the security of the network infrastructure of such organizations is neglected, and resources that process medical information are accessible from outside sources.
Click to expand...

ronjor · Sep 22, 2017

FTC serves health-app maker massive slice of humble pie—and $1.5M bill

Beth Mole - Sep 22, 2017 4:51 pm UTC
The Pact app was supposed to help users meet weekly goals for exercising and eating veggies. Users that succeeded were promised cash rewards, while those who broke their health “pact” paid penalties. But according to the Federal Trade Commission, it was the app maker that saw diet and exercise results—it feasted on users’ bank accounts and made a run for it when “tens of thousands” of them complained.
Click to expand...

ronjor · Sep 27, 2017

Healthcare sector reports greatest number of security incidents

Help Net SecuritySeptember 27, 2017
McAfee Labs’ quarterly analysis of publicly disclosed security incidents found public sector to be the most impacted North American sector over the last six quarters, but healthcare overtook it in Q2 with 26% of incidents.
Click to expand...

ronjor · Oct 12, 2017

FDA pilot program sparks questions about healthcare IoT security risks

By Mary Shacklett | October 12, 2017, 12:55 AM PST
Apple, Fitbit, and Samsung are pre-qualified under a FDA fast track regulatory approval process for digital healthcare devices. Find out why this pilot program is ringing IoT security alarm bells.
Click to expand...

ronjor · Nov 7, 2017

Security, privacy issues we need to solve before non-medical implants become pervasive

Zeljka Zorz - Managing Editor November 6, 2017
With a recently released paper on the topic of implantable devices, he provided a comprehensive overview of the current situation regarding the use of medical and non-medical implants, and the security and privacy issues that already arose from their use, and are likely to arise in the future.
Click to expand...

ronjor · Nov 10, 2017

Connected technologies will accelerate security threats to healthcare industry

Help Net Security November 9, 2017
Unisys predicts that in the coming year, connected technology will take a more prominent role within the supply chain, as sensor-based track-and-trace technology will allow companies to verify product shipping information, monitor temperature issues and adjust routes based on environmental factors affecting drug viability, as well as utilizing cross-platform analytics based on tracking data to help improve route efficiencies and deliver critical medications to people who need them, when they need them.
Click to expand...

ronjor · Nov 14, 2017

Medigate Emerges From Stealth With Medical Device Firewall

By Eduard Kovacs on November 14, 2017
Israel-based startup Medigate emerged from stealth mode on Tuesday with a firewall designed specifically for protecting medical devices, and more than $5 million in seed funding.
Click to expand...

ronjor · Nov 22, 2017

Curing The Security Sickness in Medical Devices

By Jalal Bouhdada on November 22, 2017
Just as the rapid development of the Internet of Things (IoT) has transformed traditional industries and service sectors, it is also having a great impact in the world of healthcare. It’s easy to argue, in fact, that no area is being transformed by digital technologies as rapidly or with as many benefits for society as new medical technologies.
Click to expand...

Minimalist · Nov 29, 2017

OpenEMR flaw leaves millions of medical records exposed to attackers

A vulnerability in the free, open source electronic medical record and medical practice management software OpenEMR can be exploited to steal patients’ medical records and other personally identifiable information, Risk Based Security warns.
Click to expand...

https://www.helpnetsecurity.com/2017/11/29/openemr-flaw-medical-records-exposed/

ronjor · Dec 4, 2017

Hacked IV Pumps and Digital Smart Pens Can Lead to Data Breaches

Dawn Kawamoto 12/4/2017
Researcher to reveal IoT medical device dangers at Black Hat Europe this week.
Click to expand...

Minimalist · Dec 6, 2017

Edina fertility clinic hacked in ransomware attack

Thousands of patients at an Edina fertility center had their personal and health information exposed by a hacker demanding a ransom from the company.

A spokeswoman for Colorado Center for Reproductive Medicine (CCRM) said Monday that while security for the sensitive information at the Edina site had been compromised, any misuse by the unidentified hacker has not surfaced.
Click to expand...

http://www.startribune.com/ransomwa...nts-data-at-edina-fertility-clinic/462070673/

Minimalist · Dec 8, 2017

Hackers use email credentials to get access to data at Henry Ford

Henry Ford Health System, a six-hospital delivery system serving metropolitan Detroit, has begun notifying 18,470 patients following a hacking attack.

The organization on October 3 learned that one or more unknown attackers gained access to or stole the email credentials of a group of employees; the emails also contained protected health information.

Using the email credentials, the perpetrators would have had access to the email accounts of the employees, the health system said in a notice to media outlets.
Click to expand...

https://www.information-management....edentials-to-get-access-to-data-at-henry-ford

ronjor · Dec 12, 2017

Cybersecurity Incidents Hit 83% of U.S. Physicians: Survey

By Eduard Kovacs on December 12, 2017
A majority of physicians in the United States have experienced a cybersecurity incident, and many are very concerned about the potential impact of a cyberattack, according to a study conducted by professional services company Accenture and the American Medical Association (AMA).
Click to expand...

ronjor · Dec 14, 2017

Report: When it comes to web apps, healthcare is the biggest target for hackers

By Brandon Vigliarolo | December 13, 2017, 12:08 PM PST
Data gathered by Positive Technologies found that healthcare web apps are experiencing an average of 1,526 separate attacks per day. Here's what IT security teams need to look for.
Click to expand...

Minimalist · Dec 28, 2017

Longs Peak Family Practice in Longmont hacked, patient data possibly compromised

Longs Peak Family Practice, a medical clinic in Longmont, suffered a data breach that was discovered in November and might have compromised patients' personal information.

Boulder law firm Caplan & Earnest on Wednesday issued a news release on behalf of the medical clinic that a forensic investigator discovered evidence of three instances of unauthorized access to the clinic's computer network in November.
Click to expand...

http://www.dailycamera.com/longmont-news/ci_31554434/longmont-medical-clinic-hacked

ronjor · Dec 29, 2017

21st Century Oncology Faces $2.3M HIPAA Settlement Cost after Breach

Dark Reading Staff 12/29/2017
Company to pay US Department of Health and Human Services over potential HIPAA violations after patient medical data was stolen by cyberthieves.
Click to expand...

Minimalist · Jan 2, 2018

Healthcare organizations and the cloud: Benefits, risks, and security best practices

Healthcare organizations are moving their business-critical applications and workloads to the cloud, and while there are many benefits (lower costs, added flexibility and greater scalability), there are also inherent risks that cannot be overlooked.
Click to expand...

https://www.helpnetsecurity.com/2018/01/02/healthcare-cloud-risks/

AM9617 · Jan 2, 2018

ronjor said: ↑

21st Century Oncology Faces $2.3M HIPAA Settlement Cost after Breach
Click to expand...

This is a large reason why, even though it would be most cost beneficial to go to a cloud base platform, many healthcare enterprises are resisting. Most are maintaining servers and allowing access to the servers through secured VPN. However, for private practices who are required to use an EHR, most options are only cloud based. Increasing areas of vulnerabilities for an attack. Given the fines that are assessed, some practices may not survive a breach.

ronjor · Jan 8, 2018

Healthcare breaches involving ransomware increase year-over-year

Help Net Security January 8, 2018
End of year research conducted by Cryptonite indicates that there were a total of 140 data breach events characterized and reported to HHS/OCR as IT/hacking in 2017 representing a 23.89% increase over the 113 IT/hacking events reported in 2016.
Click to expand...

Log in or Sign up

Why Healthcare Security Matters

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

hawki Registered Member

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

AM9617 Registered Member

ronjor Global Moderator

Log in or Sign up

Why Healthcare Security Matters

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

hawki Registered Member

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

AM9617 Registered Member

ronjor Global Moderator

Useful Searches