Cybersecurity news for hospitals and health systems

Columbia, Mo.-based University of Missouri Health Care learned that an employee had been inappropriately accessing patient electronic health records between July 2021 and March 2023.  

Edinburg-based South Texas Health System is notifying patients that some of their protected health information may have been compromised when an unauthorized party accessed a business associate's email account using a phishing tactic.

Allentown, Pa.-based Lehigh Valley Health Network has started notifying patients affected by a February ransomware attack.

Microsoft and software company Qualtrics are facing a patient-led lawsuit that alleges that the company's online analytics technologies violates health privacy protection laws, according to a May 15 lawsuit obtained by Becker's.

UMass Memorial Medical Center has paid $1.2 million to settle a March 2022 lawsuit regarding a data breach of its payroll management system Kronos, Telegram & Gazette reported May 16.  

The FBI has stepped in to help investigate a cybersecurity event at Louisville, Ky.-based Norton Healthcare, CBS affiliate WLKY reported May 17. 

A breach at Credit Control Corp., a Virginia-based credit reporting agency, may affect several hospitals, health systems and healthcare practices in the state. 

Sens. Josh Hawley, R-Mo., and Gary Peters, D-Miss., introduced new legislation that would require the Cybersecurity and Infrastructure Security Agency to develop a rural hospital protection strategy.

Louisville, Ky.-based Norton Healthcare said its information services and cybersecurity experts have launched an investigation into a cybersecurity event that forced the hospital to shut down its email and internet access. 

Here are five hospitals and health systems dealing with cyberattacks Becker's has reported on since May 5: