Search Results for breaches

Walgreens’ misery level rises some more: Federal court affirms $987M award to PWNHealth/Everly Health. Plus selling $295M in Cencora shares, drawing down to 6%.

...be done by PWN/Everly’s network. This breached the exclusive Master Services Agreement (MSA) with PWN/Everly. Walgreens terminated the MSA effective 1 June 2022. PWN/Everly on 10 June 2022 then initiated the arbitration with the American Arbitration Association alleging breach of contract, a violation of the Latham Act on trademarks, plus additional breaches and violations. In March 2024, the arbitrator awarded PWN/Everly $987 million. This was 12 times the contractually specified $79 million in damages. Arbitration text and decision in Jus Mundi Immediately after the arbitration, Walgreens filed suit in Delaware to vacate the ruling on the grounds that it contravened... Continue Reading

Two ‘oops’ at VA: OIG finds VA, Oracle performance misalignments, makes 9 recommendations; VP candidates’ EHR records improperly accessed by VA employees

...during this audit, determining if additional actions need to be taken and, if so, providing an action plan. VA release, Healthcare IT News Some VA employees got very naughty in looking up information on the two VP candidates. Both Ohio Senator JD Vance and Minnesota Governor Tim Walz are both veterans (Marines and Army National Guard, respectively). The breaches were discovered in August during a security sweep of high-profile health accounts held in the VA’s EHR. 12 employees used their VA computers to access information on Vance and Walz. These included physicians and a contractor viewing for an “extended time”.... Continue Reading

Short takes: states curbing healthcare cyberattack liability, North Korean hospital ransomwareiste indicted, Walmart leases out 23 clinics to Humana’s CenterWell, Nuro robot delivery revives, $100M Series E for Spring Health

News that class-action specialist law firms won’t like. States are considering limiting hospital cyberattack liability if they adopt cybersecurity measures. Currently, four states–Tennessee, Connecticut, Ohio, and Utah–have laws that curb liability for cyberattacks and data breaches. A fifth state, Florida, is considering it with the governor, Ron DeSantis, pushing for a tougher version to encourage strong cybersecurity adoption. The state lawmakers’ rationale centers on the admission that cyberattacks on hospitals are inevitable and that when hospitals have security in place, they are not negligent. On the opposite side, law firms that specialize in consumer class-action lawsuits argue that hospitals would... Continue Reading

Perspectives: Embracing the Power of EiPaaS in 2024 and Beyond

...Often, healthcare providers hire vendors without vetting their cybersecurity stance, which puts their services and patients’ information at risk. In 2023, there were 725 large data breaches in the healthcare sector, exposing over 133 million records. Hacking incidents accounted for 79.72% of these breaches​ (The HIPAA Journal)​​ (HHS.gov)​​ (The HIPAA Journal)​. EiPaaS solutions feature up-to-date compliance, secure data sharing, and encryption, ensuring that digital services are safe and trusted. Scalability is another significant advantage of EiPaaS. One of the biggest benefits is the ability to grow and shrink based on customer demand. This flexibility allows healthcare providers to handle large... Continue Reading

News roundup: Change responsible for data breach notices; 37% of healthcare orgs have no cybersec contingency plan; health execs scared by Ascension breach; CVS continues betting on health services; Plenful’s $17M Series A

...last three years 42% of practices have experienced a ransomware attack, and of those, 48% say the attack impacted customer data 34% failed to recover data after the ransomware attack 55% of medical practices allow access to more data than employees need to do their job which makes them more vulnerable to attacks While 41% of data breaches are attributable to malicious hacking, another 39% are due to malware, 37% are due to social engineering and phishing scams, 36% are due to software vulnerabilities, and 30% are due to employee error. It would have been helpful if Software Advice in... Continue Reading

News roundup: UHG CEO’s Bad Day at Capitol Hill; Kaiser’s 13.4M data breach; Walgreens’ stock beatup; Cigna writes off VillageMD; Oracle Cerner shrinks 50%; Owlet BabySat gets Wheel; fundings for Midi, Trovo, Alaffia, Klineo

...Witty’s Senate testimony statement, House testimony statement Speaking of data breaches, Kaiser Permanente reported a big one to Health and Human Services (HHS). This relates to ad tracker information shared with third-party advertisers such as Google, Microsoft, and X. Kaiser used it in secured areas of their website and mobile apps. Information disclosed could be name and IP. Kaiser reported it on 12 April but only disclosed on 25 April that 13.4 million records may have been affected. The ad trackers have since been removed. TechCrunch, FierceHealthcare Walgreens stock not recovering. April was WBA’s worst month in five years and... Continue Reading

2023 US data breaches topped 171M records, up 187% versus 2022: Protenus Breach Barometer

2023’s US healthcare data breaches hit an all time high, both in reported breaches and number of records affected. Protenus, which publishes an annual Breach Barometer, uses multiple data sources including Health and Human Services’ public breach tool. The numbers are shocking for both: HHS 2023 reported 725 reports and about 135 million records Protenus‘ numbers are significantly higher: 1,161 reports and 171,139,241 breached records. In 2022, the totals were respectively 1,138 reports affecting a total of 59,664,152 breached records. Breached records were up 187% in 2023. The variance in reporting is due to factors including not knowing the true... Continue Reading

Weekend reading: AI cybersecurity tools no panacea, reality v. illusion in healthcare AI, RPM in transitioning to hospital-at-home, Korean study on older adult health tech usage

A potpourri of current articles. Hope you don’t feel like Pepper the Robot after you read them! AI won’t boost cybersecurity, that’s cutting corners (Cybernews) AI tools that make cybersecurity more effective and faster in response are increasingly available. They are estimated in a Techopedia article rounding up multiple studies to be a global market of over $133 billion by 2030. IBM claims that organizations with AI cybersecurity took 100 days less to identify and contain data breaches. Yet AI can also leave organizations more vulnerable to cyberattack. Hackers and ransomwareistes have been using AI for years in phishing and... Continue Reading

Short takes: Humana’s big MA loss (updated); Medicare telemental care bill back in Senate; HHS releases cybersecurity performance goals; Texas Healthcare Challenge hackathon 23-24 February

...directly address common attack vectors against U.S. domestic hospitals as identified in the 2023 Hospital Cyber Resiliency Landscape Analysis. As noted earlier this week, there were 116 million patient records exposed in 2023 data breaches, doubling that in 2022. HHS means well, but this is another ‘blood out of a rock’ situation. Health IT departments all over the US, from providers to payers, have had or are facing layoffs in the ongoing clash of business versus technology, which won’t cease because HHS would like it to. HealthcareDive, HealthcareITNews, The Texas Healthcare Challenge Hackathon is back! After three years dark, this... Continue Reading

News roundup: Bright Health now NeueHealth; breached patient records double, RCM as vector for hacking; Amazon’s CCM marketplace; JPM reflects the new reality; fundings for Vita Health, Turquoise, CardioSignal

...be few. As to the bills coming due for CMS liabilities and debt owed to New Enterprise Associates now that JP Morgan has been paid…not a word. We continue to hand it to Bright, now NeueHealth, for the Best Gordian Knots in Healthcare. Release, Healthcare Dive Patient records exposed in data breaches doubled in 2023 versus 2022. According to an analysis by cybersecurity firm Fortified Health Security of HHS’ Office of Civil Rights (OCR), which tracks data breaches, in 2023 there were 116 million patient records exposed, topping the over 100 million of 2015, with over 655 breaches, a decrease... Continue Reading