May 2021 Healthcare Data Breach Report
May was the worst month of 2021 to date for healthcare data breaches. There were 63 breaches of 500 or more records reported to the Department of Health and Human Services’ Office for Civil Rights in...
View Article1 Billion-Record Database of Searches of CVS Website Exposed Online
A database belonging to CVS Pharmacy that included approximately 1 billion search records has been exposed online. The database included information about searches performed by visitors to CVS.com and...
View ArticleCISA Publishes Catalog of Cybersecurity Bad Practices That Must Be Eradicated
The DHS’ Cybersecurity and Infrastructure Security Agency (CISA) has published a new resource that lists cybersecurity bad practices that are exceptionally dangerous and significantly increase risk to...
View ArticleKaseya KSA Supply Chain Attack Sees REvil Ransomware Sent to 1,000+ Companies
A Kaseya KSA supply chain attack has affected dozens of its managed service provider (MSP) clients and saw REvil ransomware pushed out to MSPs and their customers. Kaseya is an American software...
View ArticleWebinar Today July 8, 2021: All Your HIPAA Questions Answered
In recent years, the Department of Health and Human Services’ Office for Civil Rights has issued guidance on the Health Insurance Portability and Accountability Act (HIPAA) Rules and how they apply in...
View ArticleNetwork Intrusions and Ransomware Attacks Overtake Phishing as Main Breach Cause
Network intrusion incidents have overtaken phishing as the leading cause of healthcare data security incidents, which has been the main cause of data breaches for the past 5 years. In 2020, 58% of the...
View ArticleCompliance Training for Medical Staff
Because of the many different roles in the healthcare industry, there is no one-size-fits-all compliance training for medical staff. Furthermore, the nature of healthcare compliance training modules...
View ArticleJune 2021 Healthcare Data Breach Report
For the third consecutive month, the number of reported healthcare data breaches of 500 or more records increased. June saw an 11% increase in reported breaches from the previous month with 70 data...
View ArticleReport: The State of Privacy and Security in Healthcare
2020 was a particularly bad year for the healthcare industry with record numbers of data breaches reported. Ransomware was a major threat, with Emsisoft identifying 560 ransomware attacks on healthcare...
View ArticleHealthcare Industry has Highest Number of Reported Data Breaches in 2021
Data breaches declined by 24% globally in the first 6 months of 2021, although breaches in the United States increased by 1.5% in that period according to the 2021 Mid-Year Data Breach QuickView Report...
View ArticleNCSC Password Recommendations
The UK’s NCSC password recommendations have been updated and a new strategy is being promoted that meets password strength requirements but improves usability. There are multiple schools of thought...
View ArticleScripps Health Ransomware Attack Cost Increases to Almost $113 Million
Ransomware attacks on hospitals can cause huge financial losses, as the Ryuk ransomware attack on Universal Health Services showed. UHS is one of the largest healthcare providers in the United States,...
View ArticleFuture of HIPAA: Reflections at the 25th Anniversary of HIPAA
The Health Insurance Portability and Accountability Act is now 25 years old. How effective has this healthcare law been and what is the future of HIPAA? It is now exactly 25 years to the day since the...
View ArticleJuly 2021 Healthcare Data Breach Report
High numbers of healthcare data breaches continued to be reported by HIPAA-covered entities and their business associates. In July, there were 70 reported data breaches of 500 or more records, making...
View ArticleNCCoE Releases Final Cybersecurity Practice Guide on Mobile Application...
The National Cybersecurity Center of Excellence (NCCoE) at the National Institute of Standards and Technology (NIST) has recently released the final version of the NIST Cybersecurity Practice Guide SP...
View ArticleWalgreens Covid-19 Test Registration System Has Been Exposing Patient Data
The personal data of individuals who took a COVID-19 test at a Walgreens pharmacy has been exposed over the Internet due to vulnerabilities in its COVID-19 test registration system. It is currently...
View ArticleFTC Tells Developers of Health Apps and Wearable Devices to Notify...
Developers of health apps and wearable devices such as fitness trackers that collect health data have been warned by the Federal Trade Commission (FTC) that they are required to comply with the FTC...
View ArticleAugust 2021 Healthcare Data Breach Report
There was a 44% month-over-month decrease in the number of reported healthcare data breaches in August 2021. 38 healthcare data breaches of 500 or more records were reported by healthcare providers,...
View ArticleLisa J. Pino Named New Director of HHS’ Office for Civil Rights
OCR Director, Lisa J. Pino Lisa J. Pino has been named Director of the Department of Health and Human Services’ Office for Civil Rights (OCR) and replaces Robinsue Frohboese, who has served as acting...
View ArticleCybersecurity Awareness Month: Fight the Phish!
According to the Verizon Data Breach Investigations Report, phishing accounted for around 80% of all reported phishing attacks in 2019 and since the pandemic began in 2020 phishing attacks and...
View Article