Cybersecurity news for hospitals and health systems

The FBI is investigating a state data breach in South Dakota that may have exposed information about people who tested positive for COVID-19, according to the Rapid City Journal.

The University of Kentucky inadvertently made personal information, including COVID-19 test results, of hundreds of students and employees accessible to people in the university's network, according to a report from the Lexington Herald Leader.

More than two dozen boxes of medical records containing patients' personal health information were discovered outside of Odessa (Texas) Recycling Center, according to an Aug. 20 KOSA report. 

New search engine capabilities on Google, Bing and other vendors may expose identifying patient information from slide presentations published online, according to the American College of Radiology.

A New York hospital spent three weeks under computer system downtime protocol due to a malware attack.

Saratoga Springs, N.Y.-based Saratoga Cardiology Associates has notified nearly 2,000 patients that their payment information may have been exposed after discovering information missing from bank deposit bags.

On Aug. 13, a judge dismissed a Pennsylvania health system's lawsuit against Nuance Communications over a 2017 malware attack, according to a Post-Gazette report.

An ethical hacker found 150,000 to 200,000 patients' records exposed on GitHub due to nine data leak incidents, according to Security Boulevard.

Springfield, Mass.-based Behavioral Health Network recently began notifying 129,571 patients of a malware attack in May that may have exposed their protected health information.

Brewer, Maine-based Northern Light Health Foundation was among the hospitals and health systems affected by a security breach at Blackbaud, which hosts the foundation's fundraising database.