Click here...

Related Links

Related Stories

  • Connecticut goes after Health Net for breach
    The state of Connecticut is suing health insurer Health Net, following a data breach that saw 446 000 Connecticut residents’ records compromised, it said yesterday.
  • Health Net comes under scrutiny for data loss
    Medical insurance firm Health Net is under investigation by at least two Attorney Generals, following a data loss that has exposed up to 1.5 million customer records
  • Is Patient Data Privacy on its Sickbed?
    As we stand on the cusp of a massive healthcare modernization program, we face increasing challenges over healthcare data privacy. Danny Bradbury explores what’s happening in the US from a technological perspective, and what it means for our sensitive data
  • US lawmakers upset at breach news delay
    US lawmakers are asking why a stolen laptop, which had medical test results for 2,500 patients in a National Institute of Health study, was not encrypted.
  • Two US companies own up to breaches
    On a regular basis, companies are having to own up to data breaches. HealthNow New York and MTV Networks are just the latest two making security gaffes.

News

Healthcare hacks on the rise

26 January 2010

Attempts to hack healthcare organizations doubled in the fourth quarter of last year, according to Atlanta-based managed security firm SecureWorks, setting the sector aside from others.

Other sectors, including those with sensitive data such as financial services, experienced roughly the same number of attempted hacks as before. Conversely, the last quarter of the year saw an average of 13 400 attempts to hack healthcare organizations, compared to an average of 6,500 in the first nine months.

Many of the attacks were attempted SQL injections, and attacks from the Butterfly/Mariposa botnet, according to researchers working for SecureWorks.

Healthcare information is a gold mine to criminals, who can harvest and sell the information in online black markets. A hack on a healthcare organization can also be easier than that for other sectors because of the increased attack surface, SecureWorks warned.

"Because of the nature of their business, healthcare organizations have large attack surfaces," said SecureWorks in an analysis of the healthcare attack figures. "Healthcare entities have to provide access to many external networks and web applications so as to stay connected with their patients, employees, insurers and business partners. This increases their risk to cyber attacks."

The healthcare sector faces increasingly stringent security challenges thanks to US legislation. As part of a broad approach to healthcare reform, the Obama administration is advocating a modernization of the healthcare system, and a move to electronic patient records. This has been complemented by the Health Information Technology for Economic and Clinical Health (HITECH) Act, which formed part of last year's stimulus package legislation. HITECH imposed a raft of new privacy and security requirements on healthcare companies.

 

This article is featured in:
Data Loss Internet and Network Security Public Sector

 

Comment on this article

You must be registered and logged in to leave a comment about this article.