Report: 342 million medical records leaked due to breaches since 2009
Editor's Note Healthcare organizations in the US have seen almost 5,000 data breaches since 2009, notes a cybersecurity report from technology research company Comparitech published in August 2022. According to the report, these medical breaches have led to 342 million medical records being leaked. Here are some key findings from…
Red Cross proposes digital symbol to deter hackers from healthcare facilities
Editor's Note The International Committee of the Red Cross plans to create a digital symbol, similar to its distinctive red symbol, as a warning sign to hackers who attempt to break into hospital networks, The Wall Street Journal November 4 reports. The Red Cross proposed three different options at a…
Healthcare sector has been victim to 25% of ransomware attacks in 2022
Editor's Note According to data from the FBI, just in 2022, 25% of ransomware attacks have been directed at the healthcare sector, Becker’s Health IT October 26 reports. Common Spirit Health, one of the largest nonprofit hospital systems in the US, is the latest reported victim to a ransomware attack,…
FBI: Cyber criminals targeting healthcare payment processors
Editor's Note According to a September 14 FBI report, cyber criminals are increasingly targeting healthcare payment processors to redirect payments intended for healthcare providers to accounts they control, the American Hospital Association (AHA) September 16 reports. At least 68 attacks have occurred since June 2018, in which unknown cyber criminals…
FBI warns healthcare professionals about fraud scheme
Editor's Note The FBI on August 22 warned healthcare workers of ongoing fraud schemes where scammers impersonate law enforcement and government officials in an effort to extort money or steal personally identifiable information (PII), Healthcare Purchasing News August 24 reports. By researching a medical practice’s website or social media, scammers…
HHS offers tips to protect from web application attacks in healthcare
Editor's Note The US Department of Health and Human Services (HSS) Health Sector Cybersecurity Coordination Center (HC3) released a new brief offering tips on how to protect healthcare organizations from basic web application attacks, the American Hospital Association (AHA) July 26 reports. These attacks target patient portals and expose patient…
Joint Commission collecting, sharing CISA educational resources on cybersecurity
Editor's Note The Joint Commission on July 13 announced via its blog Dateline @ TJC that it has partnered with the Cybersecurity & Infrastructure Security Agency (CISA) to compile and make available several CISA educational resources and tools on cybersecurity at no cost to healthcare providers. These include: A template…
Cybersecurity alert: New ransomware threat to healthcare out of North Korea
Editor's Note The FBI, Cybersecurity and Infrastructure Security Agency, and Treasury Department on July 6 issued a joint cybersecurity advisory warning of ransomware threats against the US healthcare and public sectors from hackers sponsored by North Korea, Becker’s Health IT July 6 reports. The FBI explained the threat comes from…
Recent ransomware attack affected 600 healthcare organizations
Editor's Note More than 600 healthcare organizations, including hospitals, practices, and other health facilities, have been affected by a data breach on an accounts receivable management company called Professional Finance Company's network, Becker’s Health IT July 5 reports. The ransomware attack on Professional Finance Company, which provides services to healthcare…
Legislation to improve medical device cybersecurity introduced, supported by AHA
Editor's Note On Friday, June 24, the American Hospital Association (AHA) voiced support for the Protecting and Transforming Cyber Health Care Act (PATCH Act)—legislation that would “require medical device manufacturers to meet certain cybersecurity requirements when seeking approval for devices that are internet connected or include software” in order to…