Cybersecurity news for hospitals and health systems

Bar Harbor, Maine-based Mount Desert Island Hospital reported a data breach affecting 24,180 patients to HHS.

Nineteen U.S. health systems operating 33 hospitals have been hit with ransomware attacks so far in 2023, according to an analyst with cybersecurity firm Emsisoft.

Allentown, Pa.-based Lehigh Valley Health Network has confirmed that its Jan. 8 cyberattack was conducted by Russian ransomware gang BlackCat.

Here are nine hospitals and health systems dealing with cybersecurity events that have taken their systems offline or have compromised patients' protected health information:

Whether to pay ransom in the event of a cyberattack is not a clear decision for hospital and health system leaders, Chief Healthcare Executive reported June 29.

Two Idaho Falls, Idaho-based hospitals and partnering clinics are still working to restore their systems after being hit by a cyberattack on May 30, eastidahonews.com reported June 29.

Wilmington, Del.-based Henrietta Johnson Medical Center is notifying patients of exposure to Delaware Health Network's data breach.

HHS' Office for Civil Rights reached a settlement with iHealth Solutions, a software and services provider for healthcare providers based in Louisville, Ky., regarding violations of HIPAA privacy and security rules.

Franklin, Tenn.-based Community Health Systems is facing another lawsuit over a January data breach that affected an estimated 1 million patients.

Fifty percent of the most common passwords in the U.S. are also among the most hacked passwords, according to SafetyDetectives.com.