Content by Marianne Kolbasuk McGee

COVID-19 Contact-Tracing Apps: The Privacy Issues

Marianne Kolbasuk McGee  •  July 17, 2020

COVID-19 contract-tracing applications that help monitor individuals' possible exposure to those who have tested positive for the virus present a variety of privacy issues that must be addressed, says regulatory attorney Nancy Perkins.

US, UK, Canada: Russian Hackers Targeting COVID-19 Research

Marianne Kolbasuk McGee  •  July 16, 2020

Government officials in the U.S., U.K. and Canada issued a joint advisory Thursday warning that a Russian hacking group is targeting various research organizations in those countries involved in COVID-19 vaccine development.

Billing Vendor Breach Affects 275,000

Marianne Kolbasuk McGee  •  July 13, 2020

Some 275,000 individuals served by a variety of healthcare sector organizations had data exposed as a result of a breach at Houston-based billing and debt collection vendor Benefit Recovery Specialists Inc. A breach at another debt collection vendor last year wound up affecting more than 20 million individuals.

Coordinating Disclosures of Medical Device Vulnerabilities

Marianne Kolbasuk McGee  •  July 10, 2020

As cyberthreats facing healthcare organizations soar, medical device maker Becton, Dickinson and Co. has ramped up its process for coordinated disclosure of vulnerabilities to help identify, assess and communicate issues to regulators and industry stakeholders, says BD's Dana-Megan Rossi.

Health Data Breach Trends: A Mid-Year Assessment

Marianne Kolbasuk McGee  •  July 9, 2020

What major health data breach trends emerged in the first half of 2020? Here's a rundown of the latest statistics - plus an analysis by experts.

Lawsuits After Ransomware Incidents: The Trend Continues

Marianne Kolbasuk McGee  •  July 6, 2020

A lawsuit seeking damages as well as security mandates has been filed against a Florida-based orthopedic group in the wake of a ransomware incident. It's the latest in a series of such legal actions in healthcare, including one in which a preliminary settlement has been reached.

HHS Hopes to Tackle Long-Stalled Regulatory Tasks

Marianne Kolbasuk McGee  •  July 2, 2020

The Department of Health and Human Services' privacy and security regulatory priorities for the rest of this year include tackling some long-stalled projects. Here's a rundown of the to-do list.

Guarding Against COVID-19 Fraud Schemes

Marianne Kolbasuk McGee  •  July 1, 2020

With the COVID-19 pandemic continuing to surge, organizations must remain vigilant in their defense against coronavirus-themed phishing, business email compromise and other fraud campaigns, says attorney Robert Egan, who offers risk mitigation insights.

Victim Count in Magellan Ransomware Incident Soars

Marianne Kolbasuk McGee  •  June 30, 2020

The number of companies and individuals affected by an April ransomware attack on managed care provider Magellan Health continues to grow. This illustrates the risks faced by interconnected organizations in the healthcare sector.

Data Breach Settlement Has an Unusual Provision

Marianne Kolbasuk McGee  •  June 29, 2020

A preliminary settlement in a class action data breach lawsuit against Iowa Health System - which does business as UnityPoint Health - contains an unusual provision that could prove quite costly.

Breach Aftermath: Authorities Order Lab to Improve Security

Marianne Kolbasuk McGee  •  June 26, 2020

Canadian information privacy regulators have ordered medical testing laboratory LifeLabs to improve its data security practices following their investigation of a 2019 breach that exposed the health data of 15 million individuals.

Breach Notification Delay: A Step-by-Step Timeline

Marianne Kolbasuk McGee  •  June 25, 2020

Why are some breach notifications delayed for months? This week, a company that operates senior care facilities in North Carolina and South Carolina issued a statement offering a step-by-step explanation.

Nurses Allege Hospital Falsified COVID-19 Testing

Marianne Kolbasuk McGee  •  June 24, 2020

A lawsuit filed against a small Georgia hospital by four of its nurses who allege the facility "schemed to manufacture false negative COVID-19 test results" for several patients who previously tested positive is shining a light on delicate issues involving whistleblowers and the privacy of patient records.

Ransomware Attacks in Healthcare: Are We Seeing a Surge?

Marianne Kolbasuk McGee  •  June 23, 2020

Four recent cybersecurity incidents that may have involved ransomware demonstrate the ongoing threats facing the sector during the COVID-19 pandemic. They also serve as a warning that extra watchfulness is needed as physicians reopen their clinics.

Telehealth After COVID-19: Privacy, Security Considerations

Marianne Kolbasuk McGee  •  June 22, 2020

If the lifting of telehealth restrictions during the COVID-19 pandemic becomes permanent through new legislation or changes in government policies, what would be the potential impact on patient data privacy and security?