Healthcare Data In Critical Condition

New study shows data breaches up and costing healthcare industry billions of dollars a year, with employees, mobile devices the weakest links

A new report taking the pulse of the healthcare industry finds that data breaches have jumped more than 30 percent and could be costing the industry an average of $6.5 billion annually.
The new Ponemon Institute 2011 Benchmark Study on Patient Privacy and Data Security, commissioned by IDExperts, found that employee error is one of the main reasons for data breaches in hospitals and healthcare providers. Hospitals and healthcare providers suffered an average of four data breaches in the past year, according to the report.
But the jump in breaches is, in part, due to better detection capabilities by healthcare organizations, says Larry Ponemon, chairman and founder of the Ponemon Institute. It was not too surprising that the rate of data loss increased … [But] we think that finding may not be as negative as it appears, and could be a discovery-rate increase with more control and governance practices and use of enabling technologies.
Another big factor in data loss, however, is the explosion in mobile devices in the healthcare field. Some 80 percent employ these devices for gathering, transmitting, and storing patient information, but half are not securing them. While these devices help patient care, they also pose a major risk of exposure for the patients health and other personal information, Ponemon says.
With all of the focus around HIPAA and HITECH [Act] and security, it surprised me to see these organizations would allow the deployment of those devices [unsecured], says Rick Kam, president of ID Experts. Its like people driving the Indy 500 without seatbelts.
Among the top reasons for breaches: nearly half were stolen or lost computing or data devices, and 46 percent, due to third-party provider mistakes. Another problem is knowing just where patient data resides: Sixty-one percent say they are not confident they know where all patient data is being stored. More than half arent sure they can detect incidents of data exposure.
More than 80 percent of hospitals have written policies for data breach reporting, but nearly 60 percent say the policies are ineffective. More than 40 percent say administrative employees are least cognizant of the need for protecting patient information.
Nearly 30 percent say the breaches they suffered resulted in medical identity theft -- a more than 25 percent increase over 2010.
A full copy of the report
is available here for download
.
Have a comment on this story? Please click Add Your Comment below. If youd like to contact
Dark Readings
editors directly,
send us a message
.

Last News
▸ CryptoWall is more widespread but less lucrative than CryptoLocker. ◂ Discovered: 23/12/2024 Category: security	▸ Feds probe cyber breaches at JPMorgan, other banks. ◂ Discovered: 23/12/2024 Category: security	▸ Security Problem Growing for Dairy Queen, UPS & Retailers, Back off ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Healthcare Data In Critical Condition