Content by Marianne Kolbasuk McGee

The Dangers of Unsecured Medical Devices

Marianne Kolbasuk McGee  •  April 19, 2019

Mitigating medical device cybersecurity risks can be a matter of life and death, warns federal adviser and security expert Anura Fernando, who says ensuring that medical device network connections are properly managed, monitored and secured is "much like keeping a weapon in a safe with the safety on."

Why a Furniture Maker Had to Report a Health Data Breach

Marianne Kolbasuk McGee  •  April 18, 2019

Sometimes, even a furniture manufacturer must report a health data breach to comply with the HIPAA Breach Notification Rule. Compliance experts explain the requirements for certain employers.

Researchers: Malware Can Be Hidden in Medical Images

Marianne Kolbasuk McGee  •  April 17, 2019

A "flaw" in the file format of the DICOM standard for communication of medical imaging information could be exploited to hide malware in MRI and CT scans alongside patient data, according to a new research report. But the developer of DICOM contends the feature isn't a flaw and any risks can be mitigated.

'Alexa, Are You HIPAA Compliant?'

Marianne Kolbasuk McGee  •  April 16, 2019

Boston Children's Hospital is pioneering the use of Amazon's Alexa voice assist technology in the healthcare sector. John Brownstein, the hospital's chief innovation officer, discusses the security measures involved.

Data Breaches in Healthcare Affect More Than Patient Data

Marianne Kolbasuk McGee  •  April 15, 2019

Two recent data breaches at organizations in the healthcare sector illustrate that systems beyond those directly related to patient care can be at risk.

Report: Healthcare Is No. 1 - For Breaches

Marianne Kolbasuk McGee  •  April 12, 2019

The healthcare sector was the No. 1 target for major data breaches last year, according to a new report. And the No. 1 cause of breaches in all sectors was phishing. What can be done to prevent these incidents?

MD Anderson Cancer Center Appeals $4.3 Million HIPAA Fine

Marianne Kolbasuk McGee  •  April 11, 2019

The University of Texas MD Anderson Cancer Center has filed a lawsuit arguing that a $4.3 million HIPAA penalty levied against it last year by the Department of Health and Human Services following three data breaches was unlawful. What are the main arguments?

Planning for Financial Impact of Data Breaches

Marianne Kolbasuk McGee  •  April 8, 2019

Healthcare organizations need to plan ahead for the financial burden of data breaches stemming from cyberattacks and also take preventive steps to help minimize those expenses, says attorney Laura Hammargren of the law firm Mayer Brown.

Cyberattack Exposes PHI in Email Accounts

Marianne Kolbasuk McGee  •  April 5, 2019

After months of review, a Georgia-based healthcare system has determined that a cyberattack last year exposed the protected health information of more than 278,000 individuals. Meanwhile, federal regulators have issued an alert about advanced persistent threats.

Groups Offer Ideas for Improving Healthcare Cybersecurity

Marianne Kolbasuk McGee  •  April 3, 2019

Several industry groups have offered suggestions - ranging from better cyber information sharing to new regulatory "safe harbors" for entities complying with best practices - in response to Sen. Mark Warner's recent request seeking ideas for improving healthcare sector cybersecurity.

Medical Practice to Close in Wake of Ransomware Attack

Marianne Kolbasuk McGee  •  April 2, 2019

A small Michigan medical practice that plans to permanently shut down in the wake of a recent ransomware attack is an example of the devastation that can result from a serious cyberattack.

Tracking Common Causes of Recent Health Data Breaches

Marianne Kolbasuk McGee  •  April 1, 2019

What are the most common causes of major health data breaches that have been added to the official federal tally so far this year? Read this analysis to find out the details.

Analyzing the $7.5 Million UCLA Health Data Breach Settlement

Marianne Kolbasuk McGee  •  March 29, 2019

A proposed settlement in a class action lawsuit filed against ULCA Health in the wake of a 2015 cyberattack affecting 4.5 million individuals stands apart from other settlements because it requires the organization to spend a substantial sum on improving its security, says attorney Steven Teppler.

Oregon Agency Reports Phishing Attack Affecting 350,000

Marianne Kolbasuk McGee  •  March 25, 2019

The Oregon Department of Human Services is among the latest entities to reveal a phishing breach impacting the protected health information of hundreds of thousands of individuals.

Warnings Issued About Medtronic Cardiac Devices

Marianne Kolbasuk McGee  •  March 22, 2019

Federal regulators and medical device maker Medtronic have issued new warnings about cybersecurity vulnerabilities in certain cardiac devices from the manufacturer that could potentially allow attackers to manipulate the products' functionality, posing safety risks to patients.