Cybersecurity news for hospitals and health systems

The European Medicines Agency confirmed Jan. 12 that some of its data related to companies including Moderna and Pfizer's COVID-19 vaccines and treatments have been leaked on the internet by hackers.

South Country Health Alliance, a county-owned health plan based in Owatonna, Minn., has notified members that their personal information was exposed during a  phishing attack on an employee email account last June.

Sellers on the dark web are advertising COVID-19 vaccines for the price of hundreds and thousands of dollars in bitcoin but failing to deliver the product, according to a Jan. 13 CNBC report. 

The Office of Civil Rights issued its 14th settlement Jan. 12 for its HIPAA Right of Access Initiative.

A phishing attack on the employee email account of a worker for Port Townsend, Wash.-based Jefferson Healthcare may have exposed the personal information of thousands of patients late last year, according to a statement from the health system.

Leon Medical Centers was hit by a malware attack in November that exposed patients' protected health information, the Doral, Fla.-based hospital announced Jan. 8.

LSU Health Care Services Division began notifying patients Jan. 8 that a September cyberattack extended beyond the Baton Rouge, La.-based health system and also affected its partner hospital, University Medical Center-New Orleans. 

Prestera Center for Mental Health Services in Huntington, W.Va., began notifying more than 3,700 patients Dec. 31 of an email security incident that exposed some of their protected health information.

Towson, Md.-based Greater Baltimore Medical Center HealthCare began restoring its EHR system Jan. 6 after a December ransomware attack shut down many of its IT systems. 

Mattapan (Mass.) Community Health Center began notifying patients Dec. 28 of a security incident that exposed some of their personal information.