Privacy & Security
HIPAA covered entities should be proactive, requiring notification of any security incident – not just breaches – in their business agreements, says Michelle Garvey Brennfleck, healthcare corporate and regulatory shareholder at Buchanan Ingersoll & Rooney PC.
The agencies contacted 130 health systems and telehealth providers by mail to emphasize the potential HIPAA risks of using Meta/Facebook pixel and Google Analytics tracking tools that may be "impermissibly disclosing" protected health information.
Steven Ramirez, CISO at Renown Health, and Steve Cagle, CEO at Clearwater, talk about the top cyber threats to healthcare and how vendors and providers – as evidenced by their long-term partnership – can work together for better risk management.
Threat actors are using artificial intelligence for both designing and executing attacks on hospitals and health systems. HC3 used ChatGPT to show how bad actors leverage generative AI to design spear-phishing emails and malware.
Plaintiffs say the apparent theft of identity and other information announced this past week, which could impact as many as 11 million people, happened because the health system did not use "reasonable security procedures and practices."
Artificial intelligence has changed the threat landscape, enabling new cybersecurity risks for health systems: more sophisticated social engineering, automated vulnerability intelligence gathering, endpoint detection evasion and more.
AT&T's annual industry insights report revealed a shift in focus from consumer virtual care in 2022 to richer budgeting for tele-emergency medical services.
The health system says the patient data, which was posted online, includes names, phone numbers and appointment information, but not clinical or payment info.
Medtronic has released an update for a cybersecurity vulnerability that an unauthorized user could exploit to steal, delete or modify cardiac device data or to gain network access.
An "unwritten requirement" can help healthcare organizations understand their environments and examine vulnerabilities to protect ePHI, says Chad Peterson, managing director at NetSPI.