Privacy & Security
An investigation following the ransomware attack against HPHC, the Bay State's second-largest health insurer, identified signs that bad actors exfiltrated PPI and PHI of patients, dependents and providers.
OrthoVirginia's chief information officer talks about the 18-month remediation process after a Ryuk ransomware incident and describes how a cybersecurity roadmap and training drove a more comprehensive cyber hygiene strategy.
The Federal Trade Commission proposes including more vendors of personal health records that access or send unsecured PHR-identifiable data in its rule governing health data sharing and unauthorized protected health information disclosure notifications.
The Federal Trade Commission alleges the company shared personal health information with two China-based firms, Google and analytics company AppsFlyer.
Also, Southeast Asian hospital chain HMI Group has bought health tech company MHC.
The exploitation of a flaw in unpatched backup and replication software could result in the compromise of healthcare network infrastructure, data theft and ransomware deployment.
The national pharmacy network, which serves long-term care, senior living and behavioral health organizations, notified patients and families that an unknown third party accessed PHI and PII in March.
QR codes designed to improve data transfer can entice healthcare data breaches. Sharat Potharaju of Beaconstac shares advice on how to safely bolster data security while providing patients the ease of mobile access.
Lessons learned from the HIMSS23 Machine Learning & AI for Healthcare Forum, as told by David Metcalf, director of METIL at the UCF Institute for Simulation & Training.
The 17-step road map is meant to help sort out shared healthcare cyber hygiene responsibilities, giving policymakers and providers direction toward protecting patient safety in the face of cyber threats.