Cybersecurity news for hospitals and health systems

Baltimore-based LifeBridge Health has agreed to pay $9.5 million to settle a lawsuit over a May 2018 data breach that compromised the protected health information of 530,000 patients, Top Class Action reported Oct. 3. 

Chicago-based CommonSpirit Health was the victim of an IT security incident that is impacting its facilities across the country, Kitsap Sun reported Oct. 3. 

A federal contractor published source codes containing sensitive credentials from the Department of Veterans Affairs, FedScoop reported Sept. 29. 

Cybersecurity incidents at public and private companies have become alarmingly frequent and a large portion of them are due to third-party data breaches.

Danville, Pa.-based Geisinger is notifying patients about a ransomware attack at a mail service vendor that has compromised the protected health information of 2,857 patients, CNHI News reported Sept. 28.  

Seattle Children's is alerting patients about a ransomware attack at a mail service vendor that has compromised the protected health information of 6,750 patients. 

Sixty-three percent of organizations have an unfilled cybersecurity position, up from 55 percent last year, according to the "State of Cybersecurity 2022" report from ISACA and LookingGlass.

Magellan Health will pay $1.43 million to settle a lawsuit over a May 2019 phishing scheme that compromised the protected health information of 273,000 patients, Top Class Action reported Sept. 28. 

Stafford Springs, Conn.-based Johnson Memorial Hospital is alerting patients that a data breach at a law firm potentially compromised some of its patient data, Journal Inquirer reported Sept. 28. 

Choice Health, the company used to help Humana sell its products, experienced a data breach that resulted in the protected health information of 22,767 patients being compromised.