A March 2017 GAO highlights flaws with credit monitoring services.
Credit monitoring services do not address these cyberthreats:
- medical identity
- tax refund fraud
Category Archives: health care data
Legal Trend. New FBI Guidelines. Healthcare. Cybersecurity.
What guidance is the FBI giving medical and dental providers on cybersecurity? That file transfer protocols, FTP, transfers csn be accessed by anonymous users without passwords. Cyber secuity measures should be taken to correct server settings.
What speficially did the FBI say about protected health information (PHI) pr personally identifiable information (PII) ? PHI & PII should not be kept on FTP servers allowing for anonymous operation
Business Trend. Health Care Data Encryption and the Denton Health Group Breach
The data breach: Denton Health Group had thieves steal 7 years of patient data
The cyber theft: The thieves stole physical hard drives which were not encrypted
Encryption & health care:
- 65% of health care providers encrypt in the cloud
Health Care Cybersecurity. The numbers you need to be informed. 88% of ransomware hits health.
- 88% of ransomware attacks are health care
- In June 2016, health care records breached hit a high of 10,880,605
- cybersecurity breachs cost health care $6.2 BILLION
- 300% increase in big breaches- hackers are looking for data in large quantities
Health Care Dive | Charts: Must-know healthcare cybersecurity statistics
1 in 4 had healthcare data breach. What you need to know:
What survey reveals that 1 in 4 U.S. Consumers had a health care data breach? An Accenture survey released at HIMSS2017 in Orlando
What is the impact to health care providers? 25% changed health care providers
TX Hospital. Data Security Civil Penalty. 4 Key Points.
the hospital: Children’s Medical Center of Dallas
the data security charge: years of noncompliance with HIPAA rules and after failing to request a hearing on the penalty. Since 2010 the hospital used unencrypted devices to store HIPAA protected info
the regulator: U.S. Department of Health and Human Services’ Office for Civil Rights
the fine: $3.2 million civil money penalty
How data breaches break down by industry. Health Care. Government. Education. Retail.
- 9.2 % were medical sector breaches
- 51% were business sector breaches
- 23.4% unknown industry sector
- 11.7% government breaches
- 4.7% education sector breaches
Becker’s Review Health IT & CIO | Medical industry accounted for 9.2% of breaches in 2016
New Regulations. Medical Device Hacking.
What entity promulgated new medical device cybersecurity rule guidance? The FDA
What prompted the new guidance? Claims of heart device hacking
Policy Issues around medical device hacking:
- assess whether the risk of patient harm is sufficiently controlled or uncontrolled
- protection of PHI- protected health information- by devices
- comprehensive risk management programs
- NIST cybersecurity protocols should be the standard
2016. The largest health care data breach. What you need to know.
- 3.7 million patients and customers affected
- Phoenix, AZ
- Banner Health
- Hackers accessed credit card processing information + patient data information
Beckers Health IT & CIO Review | 11 of the biggest healthcare data breaches of 2016
AMA. 8 Principles for Mobile Health Data Protection. The Key: State laws & regulations.
- Support the establishment or continuation of a valid patient-physician relationship;
- Have a clinical evidence base to support their use in order to ensure mHealth app safety and effectiveness;
- Follow evidence-based practice guidelines, to the degree they are available, to ensure patient safety, quality of care and positive health outcomes;
- Support care delivery that is patient-centered, promotes care coordination and facilitates team-based communication;
- Support data portability and…