Dental practice hacked – Healthcare practices under attack.

We've all read in the news about large healthcare providers and insurers being hacked and losing millions of patient records.  However, small practices need to realize why they too are targets for cyber attacks. Cyber criminals are breaching dentist, orthodontists, optometrists, ophthalmologists, nursing homes, assisted living facilities, home healthcare, hospices, CCRCs, chiropractics, therapists, and every other healthcare practice in addition to hospitals and insurance companies. If you're a healthc ...

US-CERT: Microsoft Releases Critical Security Bulletin

Microsoft has released Security Bulletin MS15-011 (link is external) to address a critical vulnerability in Windows. Exploitation of this vulnerability could allow a remote attacker to take complete control of an affected system. This security update contains a new policy feature (UNC Hardened Access) which is not enabled by default. To enable this feature, a system administrator must deploy the update, then apply the Group Policy settings described in the bulletin. For complete protection agains ...

Security Advisory: New Adobe Flash Vulnerability

Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux.  These updates address a vulnerability that could be used to circumvent memory randomization mitigations on the Windows platform. Adobe is aware of reports that an exploit for CVE-2015-0310 exists in the wild, which is being used in attacks against older versions of Flash Player.  Additionally, we are investigating reports that a separate exploit for Flash Player 16.0.0.287 and earlier also exists ...

Worry-Free Compliance with Secure (Encrypted) Email

HITECH has added new requirements to the HIPAA regulations, one of which is encrypted email when sending or receiving PHI.  It’s important for healthcare providers to understand email is NOT secure, encrypted or safe for sending sensitive information.  It is easily intercepted and read by others, which is likely cyber criminals.  To protect information being sent via email a modified email service must be used.  There have been encrypted email solutions for years and Microsoft Office 365 and other clo ...

Hackers Pay 20-times More for Medical Information

According to Kelly Yee, Vice President at Penango, the secure webmail and encryption company, hackers are willing to pay 20 times more for medical information than credit card information! The main reason is medical records are a smorgasbord of information, including social security numbers, personal information, and medical history. With information like this they can apply for credit cards, gain access to prescription medication, and much more. With the valuation of stolen credit card information going ...

2015 – The Healthcare Hack

Just a short post before the New Year! The writing is on the wall. If you look at predictions and reports from all of the security organizations, the one thing that is clear is that Healthcare will find itself the major target of hackers in 2015. As of 2013, it is reported that 43% of all data breaches involved healthcare data. That is only going to get worse! Why is healthcare such a primer target? Simple, medical records contain a lot of information about your patients identity. This allows for iden ...

Cyber Breaches – Reducing the Noise

We’ve been involved with Information Technology, cyber security and healthcare for decades.  We’ve taken our experience and focused our efforts on providing the best comprehensive HIPAA compliance solution available.  In re-evaluating security monitoring solutions we  came across the Integrity tool from SignaCert that brought some unique and powerful capabilities to our technical tool chest. With all of the cyber breaches lately, including Target, Home Depot and JP Morgan to name a few, we keep he ...

Third Rock Introduces Comprehensive HIPAA / HITECH Compliance Solution

Round Rock, Tx, Dec. 03, 2014 – Third Rock, a business technology consulting firm  focused on improving operational performance through effective and efficient compliance, has taken decades of security and enterprise experience and created a stream-lined, affordable HIPAA /  HITECH compliance solution that small and medium businesses can afford. Third Rock’s Worry-Free ComplianceTM provides all of the required elements to meet current HIPAA / HITECH requirements.  Included is continuous network se ...

Road Blocks to Creating Your Contingency Plan

Why Everyone Needs Help Creating a BC/DR (Contingency) Plan Creating a contingency plan is a huge undertaking.  It’s a major project for any company, small or large.  It’s a major project for any company, small or large; an integration effort which requires a large amount of time from experts across the company and often outside the company, including executives, managers, staff, vendors and consultants. While creating a contingency plan for a large health care provider I realized part of the pro ...

HIPAA Compliance – The Moving Finish Line

The overarching goal of HIPAA compliance is to protect the individual; both the patients’ health and their finances. Protection of the patients’ health is ensuring their medical records are not corrupted or lost, and readily available when needed. The financial protection is prevention of identity theft and other cyber-crimes. HIPAA began as a law to enable an individual to maintain health insurance when changing jobs but with the addition of federal and state regulations, and the HITECH act, it has ...

1 11 12 13 14 15 16 17 18