Privacy & Security

CMS Deputy CIO Janet Vogel to replace outgoing HHS CISO Wlaschin

By Jessica Davis 03:32 pm March 26, 2018

Christopher Wlaschin is stepping down at the end of March for family reasons, but his departure comes amid controversy surrounding the abrupt removal of two cybersecurity leaders.

Long Island provider exposes data of 42,000 patients in misconfigured database

By Jessica Davis 12:45 pm March 26, 2018

Cohen, Bergman, Klepper, Romano MDs left a database open to the public, containing backup data of 3 million clinical notes.

Credit: ATI Physical Therapy

Email hack on ATI Physical Therapy breaches data of 35,000 patients

By Jessica Davis 04:33 pm March 22, 2018

Several employee emails were breached exposing a range of patient data from Medicaid details to Social Security numbers.

Banner Desert Medical Center in Mesa, Arizona. Credit: Google Maps

OCR investigating Banner Health for 2016 breach of 3.7 million patient records

By Jessica Davis 12:34 pm March 21, 2018

The Arizona health system is cooperating with the investigation but expects to receive negative findings and a potential fine.

Heard on HIMSS TV: Thought leaders talk about the state of the industry today

By 10:33 am March 21, 2018

A roundup of big ideas from experts on interoperability, patient engagement, security, cloud computing, innovation, policy and more during HIMSS18.

HIPAA compliance GDPR privacy law in Europe

Europe's GDPR privacy law is coming: Here's what US health orgs need to know

By Jessica Davis 09:31 am March 21, 2018

By May 25, U.S. providers caring for EU patients will need to brush up on consent forms, data sharing and privacy monitoring because the General Data Protection Regulation is tougher than HIPAA.

AHIMA calls on Congress to fight opioids with information sharing, patient matching

By Mike Miliard 01:51 pm March 20, 2018

The group says privacy can still be maintained while giving care providers secure access to relevant substance abuse data and calls on Congress to allow HHS to pursue patient ID strategies.

Pitfalls to avoid with third-party security vendors

A view from the Cybersecurity Command Center at HIMSS18 in Las Vegas.

The biggest security challenges in working with third-party vendors, and how to avoid them

By Bill Siwicki 02:23 pm March 19, 2018

Cybersecurity experts offer valuable advice on dealing with third parties because while a third party may be responsible for a breach, it's the healthcare organization that is accountable.

PHC's East Side Medical in Des Moines, Iowa. Credit: Primary Health Care

Primary Health Care announces email breach one year after discovery

By Jessica Davis 12:32 pm March 19, 2018

Hackers broke into four employee email accounts of the Iowa provider, allowing access to a wide range of sensitive data.

The Cybersecurity Command Center at HIMSS18 in Las Vegas hosted interactive booths and challenges as well as education sessions about current cybersecurity issues.

HIMSS18 cybersecurity recap: Threat sharing and the need for boardroom priority

By Jessica Davis 01:11 pm March 16, 2018

From Google to NIH, the message was clear at the annual health IT conference: Hospitals need to make cybersecurity a budget priority and tackle security as a team.