Deven McGraw, deputy director for health information privacy at HHS’ OCR, told Bloomberg BNA the guidance will clarify when a ransomware attack is considered a data breach, a currently murky designation, as ransomware generally just encrypts and prevents access to data instead of extracting the data.
So far, healthcare organizations have not reported ransomware events as breaches, according to the report. However, Ms. McGraw told Bloomberg BNA ransomware events will likely be considered breaches because healthcare organizations still lose control of their data in these events.
More articles on ransomware:
House of Representatives targeted in ransomware attempts
First known ransomware attack in 1989 also targeted healthcare
FBI: Hospitals must take ransomware threat seriously
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit