.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
Dean Levitt
The Children's Hospital of Philadelphia suffers HIPAA email breach
On October 23, 2018, The Children's Hospital of Philadelphia submitted a HIPAA Email Breach to the U.S. Department of Health and Human Services...
Hello world,
Today’s Paubox Weekly is 554 words - a 2 minute read.
Want to get this type of content delivered to your inbox every Friday? Subscribe to Paubox Weekly.
1. Email security breaches expose patient data at 2 major healthcare institutions
Email security breaches at Children’s Health Care in Minnesota and the Los Angeles County Department of Mental Health exposed the protected health information (PHI) of thousands of patients.
What happened: The compromised information includes names, medical record numbers, and treatment details, raising concerns about patient privacy.
Train staff to prioritize email security
2. Healthcare marketing and AI - 2024 NESHCo Annual Conference
The Paubox team is in Newport, RI, for the 2024 NESHCo Annual Conference hosted by the New England Society for Healthcare Communications.
In the know: A hot topic of discussion at NESHCo was the ever-increasing threat of cyberattacks and crisis communication in the wake of the Change Healthcare debacle.
Healthcare marketing demands continuous innovation
3. Providers seek clarity on Change Healthcare data breach reporting
As the healthcare industry deals with the fallout of the Change Healthcare data breach, providers are urgently seeking clarity from the HHS on their obligations regarding breach reporting and patient notification.
Why it matters: One of the primary concerns raised by provider groups is the potential for duplicate notifications, which could confuse and overwhelm patients.
Who should handle the breach notifications?
4. How threat actors exploit email address verification in healthcare
Threat actors use email address verification to ensure their spoofed emails appear legitimate and are more likely to reach and deceive recipients by mimicking trusted healthcare provider names.
Go deeper: Using email address verification tools, they compile lists of valid email addresses, ensuring their emails reach real users rather than bouncing back due to invalid addresses.
Impersonates legitimate organizations, including healthcare providers
5. Slack used customer data to train AI models without permission
Slack, a cloud-based team communication platform, was caught using users' data and information to train its AI tools without explicit consent.
Why it matters: Slack was supposed to obtain consent from the users after telling them how their data would be used. Slack’s use of its customer data without obtaining consent violates users' data privacy rights.
Community links
- CMS final rule mandates minimum staffing standard for nursing homes. Link
- 560 million users' data exposed in Ticketmaster breach. Link
- Case against Hopkins doctors that shared PHI with Russia dismissed. Link
- HIPAA compliant newsletter tips and best practices. Link
- Combating phishing in healthcare. Link
- What is explicit consent? Link
- The impact of buffer overflow attacks against email. Link
- How credential stuffing influences healthcare. Link
- How to prevent an SQL injection. Link
- Learning to spot and avoid common health scams. Link
- The role of Health Information Organizations (HIOs) in PHI amendments. Link
- HIPAA and patient consent in emergency medical services (EMS). Link
Good reads from around the web
- Meet 24 startups advancing healthcare with AI. Link
- Ascension and Change Healthcare are not the news. Link
- Overcoming struggles to define algorithmic fairness in healthcare. Link
- Healthcare lags other sectors in cybersecurity. Link
- Congress shows concern for healthcare cyber attacks. Link
What happened last week
Children's Pediatric Hospital fined $3.2 million
Children’s Pediatric Hospital in Dallas, Texas has paid a fine of $3.2 million in accordance to several breaches of the Health Insurance Portability...
Learning from the Boston Children’s Health Physicians' ransomware attack
Tshedimoso Makhene : October 28, 2024
Ransomware gang BianLian recently targeted Boston Children’s Health Physicians (BCHP), a pediatric group operating in New York and Connecticut, by...