Marianne Kolbasuk McGee

Executive Editor, HealthcareInfoSecurity, ISMG

McGee is executive editor of Information Security Media Group's HealthcareInfoSecurity.com media site. She has about 30 years of IT journalism experience, with a focus on healthcare information technology issues for more than 15 years. Before joining ISMG in 2012, she was a reporter at InformationWeek magazine and news site and played a lead role in the launch of InformationWeek's healthcare IT media site.

CynergisTek Gets New Owner: CEO Explains Deal

Marianne Kolbasuk McGee • January 19, 2017

Mac McMillan, CEO of the information security consulting firm CynergisTek, explains in an interview why he sold the company he co-founded 13 years ago to healthcare document management firm Auxilio Inc., and what's planned next.

Insurer Slapped with $2.2 Million HIPAA Settlement

Marianne Kolbasuk McGee • January 18, 2017

In its second HIPAA enforcement action for 2017, HHS has slapped an insurer with a $2.2 million settlement in the wake of a relatively small breach, citing the company's lack of timely corrective action.

Cancer Charity Latest Apparent Victim of 'TheDarkOverLord'

Marianne Kolbasuk McGee • January 17, 2017

A small Indiana charity that provides support services to cancer patients is the latest apparent victim of a hacker identified as "TheDarkOverlord," an extortionist who has been tormenting the healthcare sector since last summer. But the organization is refusing to pay a ransom to retrieve lost data.

Health Data Exchange: 3 Key Security Steps

Marianne Kolbasuk McGee • January 16, 2017

Critical issues that must be addressed to pave the way for broader exchange of health information are expanding the use of multifactor authentication and data encryption and making broad improvements in identity management, says David Kibbe, M.D., president and CEO of DirectTrust.

When Can Patient Information Be Shared With Loved Ones?

Marianne Kolbasuk McGee • January 13, 2017

HHS has issued new health data privacy guidance and announced a contest to create an online "model privacy notice generator." Plus, it's issued a reminder about the importance of reviewing and securing audit logs to help prevent and detect breaches.

Doctor Won't Be Fined in HIPAA Case Involving Campaign

Marianne Kolbasuk McGee • January 11, 2017

A physician who used her patients' information to aid her successful 2015 campaign for Virginia state senator in violation of the HIPAA Privacy Rule won't be sanctioned by federal regulators.

A New In-Depth Analysis of Anthem Breach

Marianne Kolbasuk McGee • January 10, 2017

Seven state insurance commissioners conclude in a new in-depth report that the massive cyberattack on Anthem Inc. was carried out by a hacker on behalf of a nation-state. But they stop short of naming the nation involved or penalizing Anthem for the breach that affected 80 million.

2 Agencies Issue Alerts on St. Jude Medical Cardiac Devices

Marianne Kolbasuk McGee • January 9, 2017

Two government agencies have issued alerts about cyber vulnerabilities in certain cardiac devices from St. Jude Medical, which were at the center of a controversial report by an investment firm last year. The device maker, recently acquired by Abbott Laboratories, has issued software updates to address the problems.

$475,000 HIPAA Penalty for Tardy Breach Notification

Marianne Kolbasuk McGee • January 9, 2017

In a reminder of HIPAA's tough requirements for breach notification, federal regulators have issued a $475,000 financial settlement and corrective action plan for Chicago-based Presence Health tied to its tardy notification for a 2013 paper records breach affecting only about 800 individuals.