A California healthcare provider took nearly seven months to report to regulators a phishing incident that exposed information on 200,000 patients. Security experts are analyzing whether the delay could be justifiable.
PIH Health, a regional healthcare network based in Whittier, California, says that it discovered in June 2019 a phishing incident that it eventually reported to the Department of Health and Human Services on Jan. 10, 2020.
Click here to read the full story.
Jon Moore considers how healthcare entities should address patient data risks when clinicians use ChatGPT or similar AI tools
This article shares some of the highlight results from Healthcare Innovation's annual survey, with analysis of the results by industry leaders and observers.
Hacking and business associate incidents dominated in 2022, foreshadowing the top risks and threats that will impact healthcare and their vendors this year
Jon Moore shares his predictions for 2023 cybersecurity supply chain risk
Jon Moore discusses cybersecurity supply chain risk and the actions that organizations should take in order to properly implement and prepare for new technology.
Dave Bailey shares 2023 predictions in healthcare cybersecurity including ransomware, supply chain, and medical device threats.
A joint investigation by STAT and The Markup of 50 direct-to-consumer telehealth companies found Virtual care websites were leaking sensitive information to the world’s largest advertising platforms.
The provider says pixels used to collect information about website users may have transferred certain types of patient information since 2017.
Andrew Mahler discusses recent OCR bulletin outlining how organizations using tracking tech like Meta Pixel should pay close attention to whether PHI is being handled in accordance with HIPAA.
Andrew Mahler discusses the recent HHS warning on the use of tracking code in many healthcare websites and portals could be violating HIPAA privacy regulations.
Andrew Mahler, former OCR investigator shares his expertise on new privacy laws and challenges and best practices healthcare, and how they may have added salience in a post-Dobbs decision world.
Clearwater's Jon Moore Jon Moore considers several lessons emerging from the Somnia case related to vendor security.
Andrew Mahler discusses the idea that providers now need to think outside of routine types of patient information disclosures.
Health systems have made progress, but they still have a long way to go, says Clearwater CEO Steve Cagle. Hospital executives must drive change from the top.
Healthcare organizations should be ready to find and patch instances of OpenSSL 3.0, warn cybersecurity experts.
Healthcare security experts are offering their two cents on the technical supply chain as part of a cybersecurity awareness month campaign
Ben Denkers discusses the industry alert issued in September 2022 from the FBI regarding unpatched and outdated medical devices that are vulnerable to cyberattacks
Mac McMillan discusses the impacts and cost of disruption at the latest HCP Fall Conference.
Healthcare security experts are offering their two cents on enabling multi-factor authentication as part of a cybersecurity awareness month campaign
