Content by Marianne Kolbasuk McGee

Look for More FDA Medical Device Security Alerts in 2016

Marianne Kolbasuk McGee  •  December 8, 2015

Healthcare organizations should expect more FDA cybersecurity alerts about medical devices in the year ahead, predicts security researcher Kevin Fu, who explains why.

Business Associates: A HIPAA Enforcement Priority?

Marianne Kolbasuk McGee  •  December 7, 2015

In the year ahead, federal regulators need to ramp up their efforts to enforce HIPAA compliance among business associates because so many lack mature security controls, argues security expert Mac McMillan of the consultancy CynergisTek.

Cyberattack Drill: Eye-Opening Lessons

Marianne Kolbasuk McGee  •  December 4, 2015

The experience of a dozen health plans that participated in a cyberattack drill spotlights the need for a well-thought-out incident response plan, says John Gelinne of Deloitte Advisory Cyber Risk Services.

NY Medical Center Faces HIPAA Penalty

Marianne Kolbasuk McGee  •  December 3, 2015

In yet another HIPAA enforcement action by a state attorney general, the New York AG has fined the University of Rochester Medical Center after a nurse practitioner gave patients' information to her future employer without getting the patients' permission.

Two-Factor Authentication Far from Ubiquitous at Hospitals

Marianne Kolbasuk McGee  •  December 3, 2015

Despite the frequency of healthcare data breaches, only half of U.S. hospitals have the infrastructure to support two-factor authentication, according to a new report. Plus, some information security leaders say implementation of the technology at many of those facilities is likely relatively narrow.

HHS OIG Outlines Anti-Fraud, Security Actions

Marianne Kolbasuk McGee  •  December 2, 2015

In its latest report to Congress, the HHS Office of Inspector General spotlights recent efforts to combat healthcare fraud and pinpoints how data security can be improved at several agencies within HHS.

Puerto Rico Insurer Fined $3.5 Million in HIPAA Settlement

Marianne Kolbasuk McGee  •  December 1, 2015

In the second largest financial penalty ever issued as part of a HIPAA resolution agreement, federal regulators have smacked Puerto Rico-based health insurer Triple-S Management with a $3.5 million fine as a result of multiple breaches. It's the company's second large fine from a government agency.

Report: Insiders Still Top Breach Threat

Marianne Kolbasuk McGee  •  November 30, 2015

While cyberattacks will continue to menace healthcare and other business sectors next year, organizations can't afford to overlook addressing risks tied to insiders, who are responsible for most data breaches, says Michael Bruemmer of Experian Data Breach Resolution.

Lahey Hospital Fined $850,000 in HIPAA Case

Marianne Kolbasuk McGee  •  November 25, 2015

Federal regulators have announced an $850,000 HIPAA settlement with Lahey Hospital and Medical Center stemming from an investigation into the theft of a laptop that was used to operate a medical device.

FTC to Appeal Ruling that Dismissed LabMD Case

Marianne Kolbasuk McGee  •  November 25, 2015

The Federal Trade Commission's Bureau of Consumer Protection plans to appeal an FTC administrative law judge's initial decision to dismiss the FTC's data security enforcement case against LabMD, a cancer testing laboratory.

Moody's Warns Cyber Risks Could Impact Credit Ratings

Marianne Kolbasuk McGee  •  November 24, 2015

Credit rating agency Moody's Corp. warns that cyber defenses as well as breach detection, prevention and response will be higher priorities in its analysis of the creditworthiness of companies across all sectors, including healthcare and financial services.

LabMD CEO Speaks About FTC Legal Battle

Marianne Kolbasuk McGee  •  November 23, 2015

LabMD's recent victory in its long legal battle with the Federal Trade Commission will be short-lived, the medical testing lab's CEO predicts. Find out why, and what changes Michael Daugherty hopes the case will bring to FTC's enforcement practices.

Protecting the Privacy of Patients' Genomic Data

Marianne Kolbasuk McGee  •  November 23, 2015

As precision medicine research advances, the medical community must take steps to address the privacy risks to sensitive genetic information that is shared among researchers, says Carlos Bustamante of Stanford University.

Email Breaches Lead to 'Wall of Shame'

Marianne Kolbasuk McGee  •  November 19, 2015

Several recent data breaches involving email mishaps serve as a reminder of precautions that healthcare entities must take with protected health information contained in digital communications that are sent or received by their organizations.

Will FTC Ruling Impact Future Data Security Cases?

Marianne Kolbasuk McGee  •  November 18, 2015

The ruling to dismiss the FTC's data security case against medical lab LabMD will result in FTC staff more carefully vetting the enforcement cases the agency pursues against all other companies in the future, predicts former FTC attorney Reed Freeman.