Content by Marianne Kolbasuk McGee

Telehealth After COVID-19: Privacy, Security Considerations

Marianne Kolbasuk McGee  •  June 22, 2020

If the lifting of telehealth restrictions during the COVID-19 pandemic becomes permanent through new legislation or changes in government policies, what would be the potential impact on patient data privacy and security?

Alerts: Vulnerabilities in 6 Medical Devices

Marianne Kolbasuk McGee  •  June 19, 2020

Federal authorities are sounding the alarm about cybersecurity vulnerabilities in six medical devices from three manufacturers. The device makers are providing risk mitigation advice.

Business Associate Incidents Added to Breach Tally

Marianne Kolbasuk McGee  •  June 17, 2020

Several major health data breaches that have been added to the federal "wall of shame" tally in recent weeks serve as stark reminders of the security and privacy risks posed by business associates.

HHS Issues COVID-19 Plasma Donation HIPAA Guidance

Marianne Kolbasuk McGee  •  June 16, 2020

As healthcare organizations seek out recovered COVID-19 patients for potential donations of blood plasma containing virus antibodies to help treat other patients, they need to ensure these outreach activities comply with HIPAA privacy regulations, according to new federal guidance.

COVID-19: Privacy, Security Concerns as Businesses Reopen

Marianne Kolbasuk McGee  •  June 12, 2020

As businesses reopen, they need to carefully consider the privacy, security and legal implications of collecting COVID-19 related information from customers, employees and other individuals, says privacy attorney Iliana Peters of the law firm Polsinelli.

Lawsuit Filed Against Accounting Firm in Patient Data Hack

Marianne Kolbasuk McGee  •  June 11, 2020

A proposed class action lawsuit filed against an accounting firm in the wake of a 2019 ransomware incident that allegedly exposed patient data to potential cybercriminals serves as the latest reminder of the security and privacy risks posed by vendors.

Telehealth App Breach Spotlights Privacy, Security Risks

Marianne Kolbasuk McGee  •  June 10, 2020

A software error that briefly allowed individuals to access other patients' telehealth appointment recordings serves as a reminder of the potential security and privacy risks involving telemedicine applications, especially as the use of the technology soars during the COVID-19 pandemic.

Are Academic Healthcare Systems Top COVID-19 Attack Targets?

Marianne Kolbasuk McGee  •  June 8, 2020

Educational institutions and healthcare entities both have been favorite targets of hackers during the coronavirus pandemic - but academic healthcare systems involved with COVID-19 research appear to be in the bullseye. Among the latest institutions reportedly hit is the University of California San Francisco.

Virtual Summit Dives Into Healthcare Cybersecurity Issues

Marianne Kolbasuk McGee  •  June 5, 2020

How have the cybersecurity challenges facing healthcare organizations changed during the COVID-19 pandemic? And how are organizations responding? Information Security Media Group's Healthcare Cybersecurity Virtual Summit, to be held on June 9 and replayed June 10 and 11, will provide insights.

Ransomware Attacks Hit 2 More Healthcare Organizations

Marianne Kolbasuk McGee  •  June 3, 2020

Two ransomware incidents recently reported to federal regulators as health data breaches illustrate that the surge in such attacks shows no signs of abating. Security advisers offer risk mitigation tips.

Data Breach Lawsuit Filed Against Pediatric Care Provider

Marianne Kolbasuk McGee  •  June 2, 2020

A lawsuit seeking class action status has been filed against Atlanta-based Aveanna Healthcare in the wake of a 2019 data breach at the pediatric home healthcare provider that affected more than 166,000 individuals.

Identity Verification in Healthcare: Revamping a Framework

Marianne Kolbasuk McGee  •  May 29, 2020

A 15-year-old identity framework originally designed for narrow use by pharmaceutical companies is being revamped and updated for broader use in healthcare, says Kyle Neuman, managing director of SAFE Identity, an industry consortium and certification body that's coordinating the project.

Safeguarding COVID-19 Research, Other Intellectual Property

Marianne Kolbasuk McGee  •  May 28, 2020

As cyberthreats to medical research on COVID-19 - and other intellectual property - grow, organzations must take critical steps to prevent the theft of their "innovation capital," says Russell Koste, chief security officer of Alexion Pharmaceuticals.

HHS's COVID-19 Response, Recovery Efforts to Be Scrutinized

Marianne Kolbasuk McGee  •  May 27, 2020

A federal watchdog agency has established key goals and objectives - including protecting the security of IT infrastructure as well as combating fraud - that drive its oversight of the Department of Health and Human Services' COVID-19 response and recovery activities.

How to Avoid Unnecessary Breach Reporting

Marianne Kolbasuk McGee  •  May 26, 2020

Healthcare organizations need to diligently assess whether a security incident involving patient information truly qualifies as a reportable breach under HIPAA to avoid needlessly reporting it to federal regulators, says regulatory attorney Helen Oscislawski.