Content by Marianne Kolbasuk McGee

HHS Slaps 3 Dental Practices With 'Right of Access' Fines

Marianne Kolbasuk McGee  •  September 20, 2022

The Department of Health and Human Services slapped three dental practices with fines and corrective action plans in its latest round of HIPAA enforcement actions involving patient right of access. The actions come just days after a new director of the Office for Civil Rights assumed office.

FBI Warns Healthcare Sector of Surge in Payment Scams

Marianne Kolbasuk McGee  •  September 19, 2022

Cybercriminals are netting multimillion-dollar hauls by targeting healthcare industry payment processing, the FBI warns. The criminals use publicly available personally identifiable information and deploy social engineering techniques to impersonate care providers.

How the FTC Is Sharpening Its Health Data Privacy Focus

Marianne Kolbasuk McGee  •  September 16, 2022

As the Federal Trade Commission focuses on data brokers that collect and share consumers' sensitive information, any company that participates in those activities needs to carefully review its practices, says attorney Daniel Kaufman, former acting director of the FTC's Consumer Protection Bureau.

Senators Seek HIPAA Changes to Protect Reproductive Info

Marianne Kolbasuk McGee  •  September 15, 2022

U.S. Democratic senators are urging the Biden administration to update HIPAA to enhance privacy protections over reproductive health data in the wake of the Supreme Court's decision to overturn Roe v. Wade and the constitutional right to abortion.

Texas Hospital Still Struggling Through Ransomware Attack

Marianne Kolbasuk McGee  •  September 15, 2022

A Texas nonprofit, safety net medical center is still struggling to fully bring its communications and other systems back online two weeks after a ransomware attack in which cybercriminals have demanded a ransom in the "tens of millions of dollars.

Assessing the Security Risks of Emerging Tech in Healthcare

Marianne Kolbasuk McGee  •  September 13, 2022

A host of emerging technologies - including artificial intelligence, 5G cellular, quantum computing, nanomedicine and smart hospitals - offer the potential to revolutionize healthcare, but organizations must carefully evaluate the security risks, federal authorities warn.

California Prison System Says 236,000 Affected by Hack

Marianne Kolbasuk McGee  •  September 12, 2022

The California Department of Corrections and Rehabilitation reported a hacking incident that affected 236,000 individuals, potentially including any current or former inmate who since 2008 received a mental health diagnosis while incarcerated.

Vulnerabilities Identified in Baxter Infusion Pump Devices

Marianne Kolbasuk McGee  •  September 9, 2022

Vulnerabilities in certain medication infusion pump products from manufacturer Baxter could compromise a hospital's biomedical network. The flaws highlight the risks involving the acquisition and disposal of medical technology, says researcher Deral Heiland of Rapid7.

CISA Warns of Contec Patient Monitoring Device Flaws

Marianne Kolbasuk McGee  •  September 6, 2022

Attackers could block access to every Contec patient monitoring device connected to a hospital network by sending a single malformed packet, security researchers warn. U.S. authorities say China-based Contec hasn't responded to outreach to fix the flaws.

Overcoming Zero Trust Obstacles in Healthcare

Marianne Kolbasuk McGee  •  September 2, 2022

The sheer number of connected devices in healthcare environments is one of the top challenges healthcare entities face in adopting a zero trust approach to cybersecurity, says Zachary Martin, senior adviser at law firm Venable. He discusses the obstacles to achieving zero trust in healthcare.

Bill Bans Silicon Valley From Sharing Abortion Data

Marianne Kolbasuk McGee  •  September 1, 2022

California legislators passed a bill banning companies headquartered in the state that provide "electronic communications services" from providing records, information or other assistance to law enforcement in other states related to investigations of reproductive services, such as abortion.

Report: Organ Transplant Data Security Needs Strengthening

Marianne Kolbasuk McGee  •  September 1, 2022

The national network for connecting medical centers with donated human organs faces doubts about its ability to secure data amid concerns about its IT infrastructure. A federal watchdog has reviewed the Health Resources and Services Administration and United Network of Organ Sharing.

US House Democrats Push Meta On Sharing Abortion Data

Marianne Kolbasuk McGee  •  August 31, 2022

House Energy and Commerce Committee Democrats sent a letter Wednesday to Mark Zuckerberg asking the social media chief executive about his company's privacy and security practices following reports that the company released users' data in a Nebraska case involving an allegedly illegal abortion.

Ex-Employee Alleges Health Entity Neglected Security

Marianne Kolbasuk McGee  •  August 31, 2022

A former employee of multistate senior living chain Avamere Health Services LLC has filed a proposed class action lawsuit accusing the company of negligence and other allegations in the wake of a hacking incident affecting her as well as 381,000 employees and patients.

Feds Warn of Evil Corp Threats Facing Healthcare Sector

Marianne Kolbasuk McGee  •  August 30, 2022

The Russian cybercrime syndicate Evil Corp constitutes a significant threat to the healthcare sector due to the gang's powerful malware and ransomware and its deep ties to various hacking groups, the Department of Health and Human Services' Health Sector Cybersecurity Coordination Center warns.