Cybersecurity

Morgantown, W.Va.-based Monongalia Health System and its affiliated hospitals began notifying patients Dec. 21 that their protected health information may have been exposed during an email phishing incident the health system experienced earlier this year. 

HHS' Office for Civil Rights issued new guidance Dec. 20 to explain how HIPAA covers healthcare providers who disclose protected health information to support instances of extreme risk protection orders. 

Nearly 40 ransomware operators have attacked hospitals, health systems and other providers since January 2020, according to a recent analysis from the CyberPeace Institute. 

Baylor Scott & White Medical Center in Waxahachie, Texas, recently notified its patients that their personal information may have been exposed during a data breach.

Hackensack, N.J.-based Regional Cancer Care Associates will pay $425,000 and implement new privacy and security measures to settle a 2019 data breach that exposed 105,200 patients' information, the New Jersey acting attorney general's office said Dec. 15. 

A growing number of hospitals and health systems, including Baptist Health and Ascension, have been impacted by a Dec. 11 ransomware attack on human resources management company Ultimate Kronos Group.

Medical devices are more advanced, connected and ubiquitous than ever.

The HHS Cybersecurity Program has issued a letter warning of a software vulnerability that puts healthcare providers across the country at risk of a cyberattack.

Certain Hillrom Welch Allyn cardiology products have an authentication vulnerability that could let hackers gain access to privileged accounts, the Cybersecurity and Infrastructure Security Agency recently announced. 

San Angelo, Texas-based Shannon Medical Center has implemented downtime procedures for processing payroll and timesheets after its human resources management company Ultimate Kronos Group experienced a cyberattack Dec. 13, The San Angelo Standard-Times reported.