Advertisement

Cybersecurity news for hospitals and health systems

Healthcare cybersecurity news covering breaches, ransomware and the hospital cyberattacks that shut down clinical operations. Becker's tracks how health systems detect, respond and spend to prevent the next one.

The Medical Group Management Association is seeking clarity from the HHS' Office for Civil Rights regarding who carries the burden of providing HIPAA-required breach notifications to both the federal government and affected patients following the Change Healthcare cyberattack.   

Oakland, Calif.-based Kaiser Foundation Health Plan is notifying current and former patients that it shared information with third-party advertisers. 

Healthcare cybersecurity budgets and teams have grown significantly since 2019 as threats become more pronounced, according to an April 2024 report from Moody's Investors Service.

UnitedHealth Group's Change Healthcare said it will take several more months to identify the personal data that was compromised from its Feb. 21 cyberattack, The Wall Street Journal reported Feb. 25. 

Advertisement

Dallas-based Tenet Healthcare has to face a class-action lawsuit claiming its patient portal shared data with Facebook and other third-party companies, Bloomberg Law reported.

Cleveland Clinic's CEO said that cyberattacks pose a significant threat to health systems due to insufficient security measures across various departments and a shortage of IT personnel in hospitals, Ideastream Public Media reported April 23. 

HHS said it has not received a breach notification from UnitedHealth's subsidiary Change Healthcare in the wake of the February cyberattack it suffered. 

A vendor that provides account receivable management services to Manchester, N.H.-based Catholic Medical Center has been affected by a cybersecurity breach that has impacted patient data. 

Advertisement