Editor's Note Cybercriminals breached a legacy server at Oracle Health, stealing patient data from multiple hospitals and health systems, according to a March 31 article in Healthcare Executive. The breach, discovered around February 20, occurred before Oracle migrated the affected server from Cerner's system to Oracle Cloud. According to the…
Editor's Note Misdiagnosis, delayed treatment, and a breakdown of trust in healthcare can all result from time and resource constraints preventing proper engagement with patients—a concern that tops ECRI’s list of the most significant patient safety risks for 2025. As detailed in the global healthcare safety nonprofit’s March 10 announcement,…
Editor’s Note Backdoors in Chinese-made medical monitors could put patients at risk and compromise hospital networks across the US, according to security agencies quoted in a February 23 report from CNBC. The article cites the popular Contec CMS8000 patient monitor as an example. Both the US Food and Drug Administration…
Editor's Note In an expansive session at the 2025 OR Business Management Conference, Tampa General Hospital's emergency management team demonstrated how proactive planning, strong partnerships, and real-time decision-making helped navigate multiple crises in 2024, including back-to-back hurricanes and a cyberattack on the state's blood supply. The session was presented by Erinn…
Editor’s Note Entities covered by the HIPAA security rule may soon need to adapt to more prescriptive requirements, new compliance mandates, and significantly higher costs, according to a January 24 report from TechTarget. As outlined in a December notice of proposed rulemaking (NPRM), the proposal by the Department of Health…
Editor's Note The first federal overhaul of the HIPAA Security Rule in over a decade aims to address modern cybersecurity threats but has drawn sharp criticism from health systems over its cost and feasibility, according to a January 13 article in Axios. According to the article, the proposed changes require…
Editor's Note Between 2018 and 2024, ransomware attacks on US healthcare organizations compromised nearly 89 million patient records and resulted in downtime costing an estimated total of $21.9 billion, according to a December 18 report from Comparitech. The report tallies 654 total ransomware incidents during this period targeting hospitals, clinics,…
Editor's Note "Why is healthcare cybersecurity so bad?" This is the central question explored in a December 4 video from STAT health tech reporter Brittany Trang, who also wrote an article on the subject earlier this year. Brought into sharp focus by data exposures related to the recent attack on…
Editor's Note Artificial intelligence (AI) enabled technologies present the greatest technology risk to healthcare organizations in 2025, according to the latest list from ECRI, a nonprofit organization dedicated to safety in the industry. As detailed in the organization’s December 4 announcement, the annual report highlights critical risks that healthcare organizations…
Editor's Note Hospitals’ financial outlook is stable, although growth is slowing and certain costs are projected to increase, particularly for cybersecurity, according to two recent Becker’s reports on data from Moody’s Investor Services. The first, published November 14 in Becker’s Hospital CFO Report, notes that “hospitals are facing a stable…