NY Hospital Security Breach Shows Vulnerabilities in Healthcare Cybersecurity

NY Hospital Security Breach Shows Vulnerabilities in Healthcare Cybersecurity

SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.

  • By Sydny Shepard
  • Nov 16, 2018

So far this year, 359 healthcare breaches at hospitals, health insurers and other organizations related to healthcare have been reported to the federal government. According to the Journal of the American Medical Association, nearly 176.4 million health records were breached between 2010 and 2017. 

Included in this year's breaches is SUNY Upstate University Hospital - which announced 1,216 patient records were inappropriately accessed by an employee between Nov. 3, 2017 and Oct. 23, 2017 without having a legitimate reason to do so. 

The hospital recorded the breach to the U.S. Department of Health and Human Services Office for Civil Rights, which investigates violations of the Health Insurance Portability and Accountability Act, or HIPPA, a federal law that safeguards medical information. 

Upstate could face federal fines ranging from $100 to $50,000 per violation if an investigation shows it was negligent. 

The breach included patient names, ages, diagnoses and services received. The hospital does not believe that any of the information accessed by the employee, who has not been charged with a crime, was misused in any way. Social Security numbers, insurance identification numbers, credit card information and other types of personal data often used by identity thieves were were not compromised. 

Patient data breaches have been rising as the cost of a medical record goes up on the black market. These days, a data thief could pay anywhere between $500 to $800. This information can be used to submit fraudulent insurance claims, obtain medical devices, get prescription drugs and blackmail people. 

Hospitals and healthcare organizations are not making it anymore difficult for thieves to get this information, however. Organizations are not taking the time to lay out proper procedures and put policies and controls in place to protect medical records.


About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • Smarter Access Starts with Flexibility

    Today’s workplaces are undergoing a rapid evolution, driven by hybrid work models, emerging smart technologies, and flexible work schedules. To keep pace with growing workplace demands, buildings are becoming more dynamic – capable of adapting to how people move, work, and interact in real-time. Read Now

  • Trends Keeping an Eye on Business Decisions

    Today, AI continues to transform the way data is used to make important business decisions. AI and the cloud together are redefining how video surveillance systems are being used to simulate human intelligence by combining data analysis, prediction, and process automation with minimal human intervention. Many organizations are upgrading their surveillance systems to reap the benefits of technologies like AI and cloud applications. Read Now

  • The Future is Happening Outside the Cloud

    For years, the cloud has captivated the physical security industry. And for good reason. Remote access, elastic scalability and simplified maintenance reshaped how we think about deploying and managing systems. But as the number of cameras grows and resolutions push from HD to 4K and beyond, the cloud’s limits are becoming unavoidable. Bandwidth bottlenecks. Latency lags. Rising storage costs. These are not abstract concerns. Read Now

  • Right-Wing Activist Charlie Kirk Dies After Utah Valley University Shooting

    Charlie Kirk, a popular conservative activist and founder of Turning Point USA, died Wednesday after being shot during an on-campus event at Utah Valley University in Orem, Utah Read Now

  • The Impact of Convergence Between IT and Physical Security

    For years, the worlds of physical security and information technology (IT) remained separate. While they shared common goals and interests, they often worked in silos. Read Now

Most   Popular

New Products

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge.

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.