Cybersecurity

Annapolis, Md.-based Luminis Health has restored its systems after a cybersecurity incident that began Sept. 1, the health system said in an Oct. 8 update. Luminis Health’s hospitals, physician practices and other care locations continue to see patients. Teams are…

Oklahoma City-based OU Health has fired an employee who accessed 854 patients’ records without a legitimate business reason for about five months. The health system became aware of the employee’s unusual pattern of accessing patient information around June 7 and…

AI-powered testing is uncovering security weaknesses in healthcare technology, from EHR configurations that could permit undetected record access to hospital websites that could expose patient information. Epic and Google-owned cybersecurity company Wiz illustrates how AI is being used to search…

The Senate passed the bipartisan Health Care Cybersecurity and Resilience Act by unanimous consent. The legislation aims to help healthcare providers strengthen their cybersecurity defenses and protect patient information, according to an Oct. 1 news release from the Senate Committee…

Indianapolis-based Indiana University Health identified unauthorized access to information associated with certain Southern Indiana patients’ radiology files following a vendor security incident. IU Health learned Aug. 4 that its IT vendor, AME Group, may have been susceptible to a previously…

Dutch authorities have arrested an alleged leader of ShinyHunters, a cybercriminal group that has targeted healthcare organizations and their third-party vendors, the FBI said. The Dutch National Police’s High Tech Crime Unit arrested the suspect under Dutch law with the…

Annapolis, Md.-based Luminis Health has restored its MyChart patient portal as it recovers from a cybersecurity incident, the health system said in a Sept. 29 update. Patients can again use MyChart, which had been down since Sept. 1, to schedule…

Modoc Medical Center is notifying individuals after an unauthorized actor accessed its systems and downloaded files in January. The Alturas, Calif.-based hospital said  in a notice posted Sept. 23 that it discovered unauthorized access Jan. 27. An investigation found that…

Google cybersecurity subsidiary Wiz has launched Scan for Good, an AI-driven initiative that has already uncovered critical security exposures at a public hospital and a private hospital. The program pairs Wiz’s AI-powered Red Agent penetration-testing tool with Google DeepMind’s Gemini…

Eskenazi Health is notifying patients of a data breach after an employee’s cloud-based work account was compromised through a phishing email that appeared to come from a trusted business contact. The Indianapolis-based health system discovered the unauthorized access July 27,…