Category: cybersecurity

Hospitals to CISA: Simplify hospital cyber incident reporting

The American Hospital Association is raising concerns about hospital reporting requirements proposed by the Cybersecurity and Infrastructure Security Agency under the Cyber Incident Reporting for Critical Infrastructure Act. 

Pennsylvania system settles HIPAA violations for $950K

Beaver, Pa.-based Heritage Valley Health System has agreed to pay the HHS $950,000 for HIPAA violations following a ransomware attack on the organization. 

Geisinger sued by patients over vendor data breach

Former patients are joining a class action lawsuit filed against Danville, Pa.-based Geisinger asking for compensation after a data breach that affected around 1 million patients, according to a report from local NBC affiliate WJAC.

Ransomware gang claims hack on Pennsylvania hospital

The Monti ransomware group claimed responsibility for a data breach at Wayne Memorial Hospital in Honesdale, Pa., Security Affairs reported July 1.

Mass General Brigham fires 2 employees after data breach

Mass General Brigham has terminated two employees for allowing another individual to perform their duties, resulting in a breach of some patients’ protected health information.

Lurie Children's ransomware attack breached 791,000+ patient records

Ann & Robert H. Lurie Children’s Hospital of Chicago revealed 791,784 patients had their information breached as a result of a ransomware attack earlier this year.

Health system gets 500K hacking attempts a day

Ann Arbor-based Michigan Medicine experiences an estimated 500,000 hacking attempts daily, from robocalls to more elaborate schemes, MLive reported.

California system IT outage stretches into 2nd month

Poway, Calif.-based Palomar Health Medical Group’s computer systems are still down after “suspicious activity” forced them offline in May, radio station KPBS reported June 26.

Hackers targeting healthcare in order to divert payments

The FBI and HHS have issued a joint alert to healthcare leaders about a social engineering campaign targeting healthcare organizations.

Geisinger patient data compromised by IT vendor's ex-employee

Nuance Communications, an external IT services provider for Danville, Pa.-based Geisinger, has informed Geisinger patients that their personal information may have been compromised by a former Nuance employee.