Editor's Note The US Department of Health and Human Services (HHS) Advanced Research Projects Agency for Health (ARPA-H) announced that it is seeking proposals through September 7 to help fund and develop cybersecurity technologies for healthcare systems, clinics, and healthcare-related devices,  the August 17 WIRED reports. The Digital Health Security…

Read More

Editor's Note The Joint Commission, on August 15, issued “Sentinel Event Alert 67: Preserving patient safety after a cyberattack.” The Alert focuses on risks associated with cyberattacks and provides recommendations on how healthcare organizations can deliver safe patient care if a cyberattack occurs. Actions suggested by The Joint Commission include:…

Read More

Editor's Note On August 4, the Department of Health and Human Services Health Sector Cybersecurity Coordination Center released a security alert warning hospitals of a new ransomware group called Rhysida that has been active since May 2023 and is recently targeting healthcare by breaching networks and demanding a ransom. According…

Read More

Takeaways • Patient data & safety are at risk: 94% of hospitals have experienced at least one cyberattack. • Less than half of hospitals in the US carry cybersecurity insurance. • Security is a two-part strategy: cybersecurity insurance as well as preventative measures (eg, encrypted backups, patches, and training). When…

Read More

Editor's Note On June 29, the Cybersecurity & Infrastructure Security Agency (CISA) issued a medical advisory alert "warning of a significant, high-risk vulnerability in Medtronic’s Paceart Optima System, which is used to compile and manage patients’ cardiac device data," the American Hospital Association (AHA) July 6 reports. According to CISA,…

Read More

Editor's Note On Friday, June 16, the Department of Health and Human Services (HHS) alerted the healthcare sector of a recent ransomware attack on a US cancer center that “reduced cancer treatment capability, rendered digital services unavailable, and threatened exposure of patient personal health information,” the American Hospital Association (AHA)…

Read More

Editor's Note Cybersecurity remains a top concern and potential hazard for patient data. In February, Lehigh Valley Health Network in Allentown, Pennsylvania, was attacked by a ransomware gang BlackCat, which has ties to Russia, Becker’s Health IT reports. The health system has since notified 627 individuals and will continue to…

Read More

Editor's Note The Department of Health and Human Services’ (HHS) Health Sector Cybersecurity Coordination Centers on May 10 issued an alert saying that cyber attacks against Veeam Backup & Replication software are on the rise, the American Hospital Association reports. What makes the threat significant is that this software is…

Read More

Editor's Note The Biden Administration on March 2 released a National Cybersecurity Strategy that includes a comprehensive approach to accomplish the following: “strengthen collaboration with stakeholders to defend critical infrastructure; disrupt and dismantle threat actors; shape market forces to drive security and resilience; invest in a resilient future; and forge…

Read More

Editor's Note Phoenix-based Banner Health paid a $1.25 million settlement after potential HIPAA security violations left 2.81 million consumer’s health data exposed in a 2016 data breach, Becker’s Hospital Review reports on February 3.   The potential violations include lack of analysis to determine risks of electronic health records (EHRs),…

Read More