HCA Healthcare recently suffered a data breach affecting 1,038 hospitals and physician clinics across 20 states. The health system said hackers stole data from an external data storage location "exclusively used to automate the formatting of email messages." It also said that the incident has not caused any disruption to HCA's daily operations or the services it provides to patients.
Indiana University Health has begun working with healthcare technology company TRIMEDX to test the security of connected medical devices at the health system’s medical device security lab. At the lab, IU Health and TRIMEDX will focus on testing new devices, configurations and security settings, as well as actively scanning medical equipment for security vulnerabilities.
Munck Wilson Mandala Partner Greg Howison shared his perspective on some of the legal ramifications around AI, IP, connected devices and the data they generate, in response to emailed questions.
The U.S. government agencies warned that Maui ransomware has been used by North Korean state-sponsored cyber actors since at least May 2021.
HITRUST is a framework for systematically managing digital security far above what HIPAA requires. Its stringency explains both why it can be daunting to implement and why no healthcare company should go without this certification.
If you work in a hospital and you’re not a security professional, IT professional, or executive, you probably never even think about cybersecurity. And that’s exactly the problem.