Healthcare

►

Article

CyberEdBoard Profiles in Leadership: George Chacko

Marianne Kolbasuk McGee • September 11, 2024

George Chacko, executive director of information security and compliance at New York Blood Center, shares his journey in cybersecurity, the challenges for nonprofit organizations with limited budgets and resources, and collaborative initiatives to improve security programs.

Article

Mental Health Records Database Found Exposed on Web

Marianne Kolbasuk McGee • September 11, 2024

An AI-powered virtual care provider's unsecured database allegedly exposed thousands of sensitive mental health and substance abuse treatment records between patients and their counselors on the internet - where they were available to anyone, said the security researcher who discovered the trove.

►

Article

CyberEdBoard Insights: Phil Englert and Errol Weiss

Marianne Kolbasuk McGee • September 10, 2024

Healthcare organizations often face obstacles in sharing cybersecurity information. Phil Englert and Errol Weiss from Health-ISAC advocate for shifting the focus from legal risks to business risks, improving incident response and building resilience through collaboration and transparency.

Article

Acadian Ambulance Notifying Nearly 3 Million of Data Theft

Marianne Kolbasuk McGee • September 9, 2024

A Louisiana-based ambulance company that provides emergency medical care services in four states is notifying nearly 3 million people that their sensitive health information was potentially stolen in a June hack. Ransomware gang Daixin claims to have published the data on its dark web leak site.

Article

Texas AG Hopes to Upend HIPAA Rules to Investigate Abortions

Marianne Kolbasuk McGee • September 6, 2024

Texas Attorney General Ken Paxton is suing the Biden administration, alleging that "unlawful" HIPAA Privacy Rule regulations are hindering the state's law enforcement investigations into abortion cases and other reproductive health care cases.

Article

Feds Warn Health Sector to Patch Apache Tomcat Flaws

Marianne Kolbasuk McGee • September 6, 2024

Federal authorities are alerting healthcare entities of vulnerabilities - including older flaws - that put Apache Tomcat at risk for attacks if left unmitigated. The open-source web server is heavily used in healthcare for hosting electronic health record and other systems and applications.

Article

RansomHub Claims Theft of Montana Planned Parenthood Data

Marianne Kolbasuk McGee • September 5, 2024

Planned Parenthood of Montana, which provides patients with reproductive healthcare services including birth control and abortion, is responding to a hack and a threat by cybercriminal group RansomHub to leak 93 gigabytes of data allegedly stolen from the organization.

Article

HHS OCR Drops Appeal of Court's Web Tracker Ruling

Marianne Kolbasuk McGee • September 4, 2024

The Department of Health and Human Services has dropped its appeal of a recent federal court decision saying that HHS exceeded its authority in warning HIPAA-regulated entities that it's unlawful to use online tracking tools to capture certain identifiers in user visits to health-related websites.

►

Article

Automating DDoS Defense for Healthcare Amid Growing Threats

Tom Field • September 4, 2024

Organizations face a surge in sophisticated DDoS attacks, and advanced techniques are making traditional defenses obsolete. Neal Quinn, head of cloud security services business, North America, at Radware, discusses how automated solutions and real-time threat intelligence can address these issues.

Blog

Specialize in Securing Critical Infrastructure

Brandy Harris • September 4, 2024

Critical infrastructure encompasses the essential services and assets vital to the functioning of society and the economy. Specializing in security in this field requires a deep understanding of the challenges and threats facing sectors such as energy, transportation, healthcare and water systems.

Article

Radiology IT Vendor Hack Hits 4 Practices, 411,000 People

Marianne Kolbasuk McGee • September 3, 2024

A vendor that provides information systems and transcription services to radiology practices is alerting 411,037 people of a hack discovered last December involving the theft of sensitive data. The firm already faces at least four proposed federal class action lawsuits related to the hack.

►

Article

Expanding Vendor Base, Shrinking Security Perimeter?

Marianne Kolbasuk McGee • September 3, 2024

Ransomware remains a critical concern for healthcare systems, affecting the availability of patient care. Hugo Lai, CISO at Temple University Health System, said defenders need to understand the dependencies within business processes to effectively combat ransomware.

Article

CISA and HHS Would Team Up in Health Sector Under House Bill

Marianne Kolbasuk McGee • August 30, 2024

A bipartisan House bill aims to bolster cybersecurity in the healthcare sector by requiring stronger collaboration between CISA and the Department of Health and Human Services. The bill is a companion to nearly identical bipartisan legislation introduced in the Senate in July.

Article

Florida Department of Health Informs RansomHub Hack Victims

Marianne Kolbasuk McGee • August 29, 2024

Two months after RansomHub claimed to have published 100GBs of its stolen data on the dark web, the Florida Department of Health is notifying citizens that their sensitive information has been compromised. The attack affected the vital statistics system used to issue birth and death certificates.

Webinar

Live Webinar | Building a More Resilient Healthcare Enterprise and Ecosystem

Heather M. Costa, MPS, CBCP, CCRP, Director of Technology Resilience, Mayo Clinic , Jackie Mattingly, Ph.D., CHPS, HCISPP, CHISL, CISSP, Senior Director, Consulting Services, Clearwater , Angie Santiago, CBCP, Manager, Consulting Services – Resiliency Solutions, Clearwater • August 29, 2024

From attacks on hospitals that have disrupted operations for weeks to attacks on suppliers that have halted the critical flow of blood across an entire region of the country and the flow of financial information across much of the industry, healthcare's resiliency has been put to the test in a very profound way this...