Medical data breach
A medical data breach is a data breach of health information, and could include either the personal health information of any individual's electronic health record or medical billing information from their health insurance.
Black market for health data
In February 2015 an NPR report claimed that organized crime networks had ways of selling health data in the black market.[1]
In 2015 a Beazley Group staffperson estimated that medical records could sell on the black market for US$40-50.[2]
Crime is the primary cause of medical data breaches.[3]
How data is lost
Theft, data loss, hacking, and unauthorized account access are ways in which medical data breaches happen.[4]
List of data breaches
- In 2015, Anthem Inc. lost data for 37 million people in the Anthem medical data breach
- In 2014 4.5 million people using Complete Health Systems had their data stolen[5]
- In 2013-14 1 million people using Montana Department of Public Health and Human Services had their data stolen[5]
- In 2013 4 million people using Advocate Health and Hospitals Corporation had their data stolen[5]
- In 2011 4.9 million users of Tricare services had their data stolen due to an employee error by Science Applications International Corporation[5]
- In 2011 1.9 million people using Health Net had their data stolen[5]
- In 2011 1 million people using Nemours Foundation had their data stolen[5]
- In 2010 6800 people using New York-Presbyterian Hospital and Columbia University Medical Center had their data breached. In response, those organizations agreed to pay the United States Department of Health and Human Services a US$4.8 million dollar fine.[6]
- In 2009 1 million people using BlueCross BlueShield of Tennessee had their data stolen[5]
Regulation
In the United States, the Health Insurance Portability and Accountability Act and Health Information Technology for Economic and Clinical Health Act require companies to report data breaches to affected individuals and the federal government.[7]
References
- ↑ Shahani, Aarti (13 February 2015). "The Black Market For Stolen Health Care Data : All Tech Considered : NPR". npr.org. Retrieved 17 February 2015.
- ↑ Abelson, Reed; Goldstein, Matthew (5 February 2015). "Anthem Hacking Points to Security Vulnerability of Health Care Industry". The New York Times. New York: NYTC. ISSN 0362-4331. Retrieved 17 February 2015.
- ↑ Richards, Robbie (16 November 2015). "Healthcare data breaches present a $6 billion threat". royaljay.com. Retrieved 16 November 2015.
- ↑ Millman, Jason (19 August 2014). "Health care data breaches have hit 30M patients and counting". The Washington Post. Washington DC: WPC. ISSN 0190-8286. Retrieved 17 February 2015.
- 1 2 3 4 5 6 7 Fischer, Kristen (28 September 2014). "The 7 Biggest Health Data Breaches in the US (So Far)". healthline.com. Retrieved 17 February 2015.
- ↑ "Columbia Medical Center, Hospital To Pay $4.8M Fine for Data Breach". iHealthBeat. California HealthCare Foundation. 8 May 2014. Archived from the original on 7 February 2016. Retrieved 17 February 2015.
- ↑ Office of Civil Rights (26 July 2013). "Breach Notification Rule". U.S. Department of Health & Human Services.
Further reading
- "Hackers warn NHS over security". BBC News. United Kingdom. 9 June 2011.
- Sullivan, Mike (14 June 2011). "Missing: Laptop with 8.6million medical records". The Sun. London.
- Thurton, David (5 February 2016). "Inuvik hospital confirms potential data breach by employees". CBC News: North. Yellowknife, N.W.T.
External links
- Office for Civil Rights. "Breaches Affecting 500 or More Individuals". Breach Portal. U.S. Department of Health and Human Services. Retrieved 17 June 2016.