So let’s be honest: how often do you monitor your third-party vendors or business associates to ensure that the devices they may connect to your network are free from malware? Julie Anderson reports: CHI Health has caught a virus, but it’s not the kind the health system is used to battling. Dr. Cliff Robertson, CHI…
Category: Health Data
NL: Major privacy breach: students could access hospital medical records
Ugh.DutchNews.nl reports: Students working for extra cash at Amsterdam’s OLVG hospital group have for years been given complete access to the medical records system, allowing them to read personal information about friends, family and famous people, the Volkskrant said on Friday. The leak was made public by a philosophy student who made telephone appointments for…
FL: AdventHealth notifying more than 42,000 patients impacted by hack of one of their facilities
On January 25, ClickOrlando reported: A hack at a pulmonary practice in Tavares might have exposed sensitive patient information, including Social Security numbers and medical histories. Officials from AdventHealth said in a news release on Friday that an unauthorized third party gained access to systems at AdventHealth Medical Group Pulmonary & Sleep Medicine at Tavares, formerly…
Anesthesia Associates of Kansas City notifies 3,472 patients after surgery schedules stolen from nurse anesthetist’s car
The notice on their web site: Notice to Our Patients of Recent Privacy Incident Anesthesia Associates of Kansas City is committed to protecting the confidentiality and security of our patients’ information. Regrettably, this notice is to inform our patients of an incident involving some of that information. On December 16, 2018, we learned from an…
2019 Data Breach Barometer Report Shows Massive Increase in Exposed Healthcare Records
HIPAA Journal reports: Protenus has released its 2019 Breach Barometer report: An analysis of healthcare data breaches reported in 2018. The data for the report came from Databreaches.net, which tracks data breaches reported in the media as well as breach notifications sent to the Department of Health and Human Services’ Office for Civil Rights and…
Fla. Courts Require Actual Injury to Demonstrate Standing in Data Breach Cases
Nicole Rekant and Stevan Pardo write: The proliferation of data breach cases in Florida courts has focused on Article III standing. To meet the pleading standard under Article III, a plaintiff must allege sufficient facts to show the injury-in-fact is concrete, particularized, actual, and imminent, not conjectural or hypothetical. An allegation of imminent injury may suffice…