Privacy & Security
An investigation following the ransomware attack against HPHC, the Bay State's second-largest health insurer, identified signs that bad actors exfiltrated PPI and PHI of patients, dependents and providers.
OrthoVirginia's chief information officer talks about the 18-month remediation process after a Ryuk ransomware incident and describes how a cybersecurity road map and training drove a more comprehensive cyber hygiene strategy.
The Federal Trade Commission proposes including more vendors of personal health records that access or send unsecured PHR-identifiable data in its rule governing health data sharing and unauthorized protected health information disclosure notifications.
The Federal Trade Commission alleges the company shared personal health information with two China-based firms, Google and analytics company AppsFlyer.
Also, Southeast Asian hospital chain HMI Group has bought health tech company MHC.
Standardizing information capture, including a universal patient identification, can enhance data quality while eliminating the 20% record duplication rate facing healthcare organizations, says Gregg Church, president of 4medica.
The exploitation of a flaw in unpatched backup and replication software could result in the compromise of healthcare network infrastructure, data theft and ransomware deployment.
The national pharmacy network, which serves long-term care, senior living and behavioral health organizations, notified patients and families that an unknown third party accessed PHI and PII in March.
QR codes designed to improve data transfer can entice healthcare data breaches. Sharat Potharaju of Beaconstac shares advice on how to safely bolster data security while providing patients the ease of mobile access.
Lessons learned from the HIMSS23 Machine Learning & AI for Healthcare Forum, as told by David Metcalf, director of METIL at the UCF Institute for Simulation & Training.