Cybersecurity

Allentown, Pa.-based Lehigh Valley Health Network has started notifying patients affected by a February ransomware attack.

Microsoft and software company Qualtrics are facing a patient-led lawsuit that alleges that the company's online analytics technologies violates health privacy protection laws, according to a May 15 lawsuit obtained by Becker's.

UMass Memorial Medical Center has paid $1.2 million to settle a March 2022 lawsuit regarding a data breach of its payroll management system Kronos, Telegram & Gazette reported May 16.  

The FBI has stepped in to help investigate a cybersecurity event at Louisville, Ky.-based Norton Healthcare, CBS affiliate WLKY reported May 17. 

A breach at Credit Control Corp., a Virginia-based credit reporting agency, may affect several hospitals, health systems and healthcare practices in the state. 

Sens. Josh Hawley, R-Mo., and Gary Peters, D-Miss., introduced new legislation that would require the Cybersecurity and Infrastructure Security Agency to develop a rural hospital protection strategy.

Louisville, Ky.-based Norton Healthcare said its information services and cybersecurity experts have launched an investigation into a cybersecurity event that forced the hospital to shut down its email and internet access. 

Here are five hospitals and health systems dealing with cyberattacks Becker's has reported on since May 5:

Murfreesboro (Tenn.) Medical Clinic & SurgiCenter said it has begun resuming all appointments at its clinics and main campus, but said its patient portal is still down due to an ongoing cyberattack. 

The Health Sector Cybersecurity Coordination Center issued a new alert warning of the vulnerabilities in the popular data backup software Veeam Backup & Replication.