Cybersecurity news for hospitals and health systems

Change Healthcare plans to begin contacting patients whose data was breached during the February ransomware attack in late July.

Court records allege that a former Nuance employee accused of breaching patient data from Danville, Pa.-based Geisinger had fake IDs and a machine used to create them, PennLive reported.

Poway, Calif.-based Palomar Health Medical Group is inching closer to restoring access to its systems after suspicious activity forced them offline.

Health systems and industry trade groups are objecting to new cybersecurity reporting requirements proposed by the Cybersecurity and Infrastructure Security Agency.

San Antonio-based CentroMed has regained access to its EHR system after a May 1 cyberattack forced the system offline. 

Several health systems have faced financial repercussions in the wake of data breaches and cyberattacks. Here is how much three health systems are paying to settle lawsuits and alleged violations, per agreements reached this year:

The American Hospital Association is raising concerns about hospital reporting requirements proposed by the Cybersecurity and Infrastructure Security Agency under the Cyber Incident Reporting for Critical Infrastructure Act. 

Beaver, Pa.-based Heritage Valley Health System has agreed to pay the HHS $950,000 for HIPAA violations following a ransomware attack on the organization. 

Former patients are joining a class action lawsuit filed against Danville, Pa.-based Geisinger asking for compensation after a data breach that affected around 1 million patients, according to a report from local NBC affiliate WJAC.

Mass General Brigham has terminated two employees for allowing another individual to perform their duties, resulting in a breach of some patients' protected health information.