NY Hospital Security Breach Shows Vulnerabilities in Healthcare Cybersecurity

NY Hospital Security Breach Shows Vulnerabilities in Healthcare Cybersecurity

SUNY Upstate Hospital announced a former employee inappropriately accessed more than 1,200 patient records.

  • By Sydny Shepard
  • Nov 16, 2018

So far this year, 359 healthcare breaches at hospitals, health insurers and other organizations related to healthcare have been reported to the federal government. According to the Journal of the American Medical Association, nearly 176.4 million health records were breached between 2010 and 2017. 

Included in this year's breaches is SUNY Upstate University Hospital - which announced 1,216 patient records were inappropriately accessed by an employee between Nov. 3, 2017 and Oct. 23, 2017 without having a legitimate reason to do so. 

The hospital recorded the breach to the U.S. Department of Health and Human Services Office for Civil Rights, which investigates violations of the Health Insurance Portability and Accountability Act, or HIPPA, a federal law that safeguards medical information. 

Upstate could face federal fines ranging from $100 to $50,000 per violation if an investigation shows it was negligent. 

The breach included patient names, ages, diagnoses and services received. The hospital does not believe that any of the information accessed by the employee, who has not been charged with a crime, was misused in any way. Social Security numbers, insurance identification numbers, credit card information and other types of personal data often used by identity thieves were were not compromised. 

Patient data breaches have been rising as the cost of a medical record goes up on the black market. These days, a data thief could pay anywhere between $500 to $800. This information can be used to submit fraudulent insurance claims, obtain medical devices, get prescription drugs and blackmail people. 

Hospitals and healthcare organizations are not making it anymore difficult for thieves to get this information, however. Organizations are not taking the time to lay out proper procedures and put policies and controls in place to protect medical records.


About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • Maximizing Your Security Budget This Year

    Perimeter Security Standards for Multi-Site Businesses

    When you run or own a business that has multiple locations, it is important to set clear perimeter security standards. By doing this, it allows you to assess and mitigate any potential threats or risks at each site or location efficiently and effectively. Read Now

  • New Research Shows a Continuing Increase in Ransomware Victims

    GuidePoint Security recently announced the release of GuidePoint Research and Intelligence Team’s (GRIT) Q1 2024 Ransomware Report. In addition to revealing a nearly 20% year-over-year increase in the number of ransomware victims, the GRIT Q1 2024 Ransomware Report observes major shifts in the behavioral patterns of ransomware groups following law enforcement activity – including the continued targeting of previously “off-limits” organizations and industries, such as emergency hospitals. Read Now

  • OpenAI's GPT-4 Is Capable of Autonomously Exploiting Zero-Day Vulnerabilities

    According to a new study from four computer scientists at the University of Illinois Urbana-Champaign, OpenAI’s paid chatbot, GPT-4, is capable of autonomously exploiting zero-day vulnerabilities without any human assistance. Read Now

  • Getting in Someone’s Face

    There was a time, not so long ago, when the tradeshow industry must have thought COVID-19 might wipe out face-to-face meetings. It sure seemed that way about three years ago. Read Now

    • Industry Events
    • ISC West
Most   Popular

Featured Cybersecurity

Webinars

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area. 3

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.” 3

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles. 3