Two health systems experienced cyberattacks in September that forced their IT networks offline for multiple days.
Cybersecurity news for hospitals and health systems
Healthcare cybersecurity news covering breaches, ransomware and the hospital cyberattacks that shut down clinical operations. Becker's tracks how health systems detect, respond and spend to prevent the next one.
Marshall, Mich.-based Oaklawn Hospital recently notified patients of an employee email phishing attack that exposed their personal and protected health information.
After conducting an investigation, the federal government found that a hospital worker accused of violating HIPAA by allegedly sending photos of patients was framed.
King of Prussia, Pa.-based Universal Health Services confirmed that all 250-plus U.S. locations were affected by malware and expects systems to be recovered and applications reconnected soon, according to ABC News and a statement from the health system.
Anthem has agreed to pay $39.5 million to settle allegations of inadequate data security related to a 2015 cyberattack that exposed the personal information of nearly 79 million individuals, according to a Sept. 30 Indiana Business Journal report.
Advertisement
Over the past two weeks, several cyberattacks on hospitals and health systems have forced computer systems offline.
HHS released important updates on the Ryuk ransomware, which is suspected in the recent cyberattack at King of Prussia, Pa.-based Universal Health Systems hospital.
In September, 67 organizations reported to HHS a collective total of 5,648,001 individuals being affected by data breaches.
University of Missouri Health Care reported an email phishing attack in May that exposed thousands of patients' protected health information.
Nebraska Medicine in Omaha reported "significant progress" in restoring IT systems on Sept. 29, several days after a cyberattack shut them down, according to a report in the Omaha World-Herald.