Cybersecurity news for hospitals and health systems

UC San Diego Health's technology vendor Solv Health transmitted patients' confidential information to third-party service providers. 

Berlin, Md.-based Atlantic General Hospital did not accommodate hackers' demands during a recent ransomware attack, The Dispatch reported.

Rural hospitals need more government funding to deal with the increase in healthcare ransomware attacks and to hire more cybersecurity professionals, IT security leaders told Congress, CyberScoop reported March 16.

South Bend, Ind.-based Beacon Health System is notifying 3,117 patients that some of their personal information may have been accessed by an unauthorized employee who viewed patient records outside the scope of their job duties. 

More than 4.2 million patients were affected in the largest data healthcare data breach reported so far in 2023, HIPAA Journal reported March 15.

Data exfiltration was a factor in 70 percent of ransomware incidents affecting healthcare organizations, a March 9 brief from HHS' Health Sector Cybersecurity Coordination Center found.

San Bernardino, Calif.-based Regal Medical Group is facing 11 lawsuits for a December ransomware attack that compromised the protected health information of 3.3 million patients, Bloomberg Law reported March 14. 

Livonia, Mich.-based Trinity Health filed a data breach notice with the Massachusetts attorney general March 9 after it learned that some patient information was compromised as a result of unauthorized access, JDSupra reported March 14.  

Medical device and software company Zoll Medical disclosed that it suffered a data breach affecting 1,004,443 people, according to a March 10 data breach notification with the Maine Office of Attorney General.

A Lehigh Valley Health Network patient whose nude photos were posted to the dark web by a Russian ransomware gang has sued the Allentown, Pa.-based health system, The (Allentown) Morning Call reported.