Data Storyteller

Since 2010, the healthcare industry has seen a remarkable increase in the use of technology in the administration and delivery in healthcare. This has led to a mass migration of data from paper charts and isolated systems to Electronic Medical Records (EMRs) and interconnected systems that transmit patient health and financial information across trusted and untrusted networks. While this has been a boon for the industry in its ability to provide timely information to those who need it the most, this transition has introduced a great deal of risk to the confidentiality and integrity of the information. Coupled with the fact that the information can be quickly monetized by criminals through insurance fraud and identity theft, the ecosystem is target-rich.

Healthcare providers have become a lucrative target for cyber criminals and many reported breaches are occuring at health centers. Since 2009, when the Department of Health and Human Services started tracking breaches that involved protected health information exposure of 500 patients or more, upwards of 1700 cases have been reported. These breach incidences are highlighted on the U.S. Department of Health and Human Services, Office for Civil Rights Breach Portal.

Many times when we think of mobile health it is in the terms of patient engagement and communication, but it is important for Health Centers to also be familiar with privacy and security concerns as it relates to mobile devices used by providers and staff.

The National Cybersecurity Center of Excellence (NCCOE) has recently provided two new resources that cover movile device security and a catalogue of currently known threats. Both items are available for download from the NCCOE website.