Cybersecurity news for hospitals and health systems

Major cyberattacks such as those on SolarWinds and Colonial Pipeline have led to intense competition for companies to recruit top-notch cybersecurity talent.

Fort Lauderdale, Fla.-based Broward Health on Jan. 2 notified employees and patients of a data breach that potentially exposed their personal information.

Billing statements containing the personal health information of 1,661 Advocate Aurora Health patients in Illinois were mailed to the wrong location, according to the Chicago Tribune. 

Jefferson City, Mo.-based Capital Region Medical Center's computer network and telephone systems are still down after a Dec. 17 cybersecurity incident, KHQA reported.

CompuGroup Medical, a medical software vendor, reported Dec. 27 that most of its systems were up and running again after a "technical failure" due to a Dec. 20 ransomware attack.

Capital Region Medical Center has been operating on downtime procedures after taking its network systems offline Dec. 17 in response to a cybersecurity incident, the Jefferson City, Mo.-based hospital said Dec. 23. 

In complex, varied enterprises, digital identity is foundational to security and the user experience.

Morgantown, W.Va.-based Monongalia Health System and its affiliated hospitals began notifying patients Dec. 21 that their protected health information may have been exposed during an email phishing incident the health system experienced earlier this year. 

HHS' Office for Civil Rights issued new guidance Dec. 20 to explain how HIPAA covers healthcare providers who disclose protected health information to support instances of extreme risk protection orders. 

Nearly 40 ransomware operators have attacked hospitals, health systems and other providers since January 2020, according to a recent analysis from the CyberPeace Institute.