Cybersecurity

Bad actors are claiming to partner with physicians to put unvaccinated customers into official medical databases to falsely show they have been vaccinated, according to an Aug. 24 Cleveland-based Fox 8 report.

Cybersecurity researchers recently tested a popular infusion pump and dock and found that the device has certain vulnerabilities that could allow hackers to exploit its medication dosing functions, Wired reported Aug. 24. 

Misuse and misconceptions about HIPAA have been circulating in the news recently, with some falsely claiming the privacy law prohibits being asked about COVID-19 vaccination status, according to Robert Shmerling, MD. 

Nearly three weeks after experiencing a ransomware attack on its IT network, Indianapolis-based Eskenazi Health is notifying patients that hackers have posted some of the stolen data online. 

More than a thousand web apps that use Microsoft's Power Apps portal service mistakenly exposed millions of records including data from COVID-19 contact-tracing platforms and vaccination sign-ups online, Wired reported Aug. 23. 

Provo, Utah-based Revere Health began notifying about 12,000 patients that their medical records had been exposed in a recent email phishing attack, St. George Spectrum & Daily News reported Aug. 23. 

Sunrise-based South Florida Community Care Plan said it's taking action after discovering a former employee was sending a patient's protected health information to his personal email account.

Atlanta Allergy & Asthma began notifying nearly 10,000 patients Aug. 10 that their protected health information was removed from the clinic's IT network in connection with a January cyberattack. 

There were 1.3 million people affected in a cyberattack on Las Vegas-based University Medical Center, the hospital reported to HHS on Aug. 13.

Early findings from the Cybersecurity and Infrastructure Security Agency link ransomware attacks on hospitals and patient mortality, according to an Aug. 19 report by The Verge.