Morgan Kennedy writes: On October 2, 2014, the Food and Drug Administration (FDA) released a final guidance document titled “Content of Premarket Submissions for Management of Cybersecurity in Medical Devices”. The FDA said that the “need for effective cybersecurity to assure medical device functionality and safety has become more important with the increasing use of wireless,…
Category: Uncategorized
Morning musings
So how long before we start seeing disclosures of HIPAA breaches related to employees snooping in ebola patients’ files?
TN: HIV records mistakenly sent to Metro school
WSMV reports on that Metro Health Department, which reported a breach over the summer, has had a second breach. Both breaches resulted from the department moving offices. In the newly disclosed breach: a file cabinet containing files on patients with HIV that was supposed to be sent to a surplus warehouse was actually sent to…
SC mental health worker’s laptop stolen in Rock Hill
Anna Douglas reports that a laptop with sensitive information was stolen from a Spartanburg Area Mental Health therapist’s car, but information on the laptop was (likely) encrypted. The laptop is used to upload patient information to a secure network via the Internet, said Mark Binkley with the department in Columbia. As a security feature, Binkley…
Ebola’s latest victim: privacy
Bob Collins writes: News media has, basically, thrown the privacy book out the window when it comes to extending privacy. CNN, in its story “Who is Nina Pham,” for example, drove to the woman’s church to get the dirt on the nurse, learning that she’s very religious. Ah. Meanwhile, Amber Joy Vinson, another nurse infected…
Security firm to start notifying patients of breaches or vulnerabilities that haven't been disclosed or addressed by the covered entities
So how many times have I said – here and on DataBreaches.net – that it’s much much better for breached entities to get out ahead of a breach disclosure than to have others disclose the breach? SLC Security has been investigating breaches – including those involving patient data. They tried – with limited success, it…