Cyber Defense eMagazine July 2021 Edition

cybercriminals targeting the public’s health information as we loosen restrictions over the next few
months.
Gary Cantrell, Head of Investigations at the HHS Office of Inspector General, said hackers tend to steal
medical records because they are like "a treasure trove of information about you." They can contain a
patient's full name, address history, financial information, and National Insurance numbers, which can be
enough information for hackers to take out a loan or set up a line of credit under patients' names.
Increasingly, hackers are selling information for profit on the black market. According to Reuters, buyers
might use the information to create fake IDs to purchase medical equipment or drugs, or to file a false
insurance claim.
The impact of medical data breaches
As we increasingly rely on technology, hackers are finding new ways to attack IT systems, disrupt
computer networks, and steal information. There can be huge benefits when patient data is used
responsibly to save lives and advance medical research, but it is undeniable that it comes with risks.
The potential impact of a data breach often depends on the circumstances. Someone who has a sensitive
medical condition may be much more concerned if part of their medical history was exposed or disclosed.
The possibility that it might fall into the wrong hands could cause them emotional distress.
According to Brandon Reagin, a victim of medical record theft, it's a "mess." Reagin's identity was stolen
in 2004, and the person who accessed Reagin's personal information used it to steal cars and rack up
$20,000 worth of medical procedures. He was reportedly unable to get the charges scrubbed from his
credit report "until the next billing cycle." Then, the process would start all over again.
The person who stole Reagin's identity served time in prison. But, 17 years later, he still hasn't been able
to undo all of the damage, including to the integrity of his own medical files, as the “hospital may still have
his information, his blood type under my name at that hospital… It's a little weird to think".
Proactive steps consumers and healthcare providers can take to protect their data
Healthcare providers and their business associates must balance delivering quality patient care with
protecting patient privacy, always ensuring that they are meeting the strict regulatory requirements set
out in legislation, such as the General Data Protection Regulation (GDPR).
Healthcare staff can protect information with a number of measures including:
• educating staff;
• restricting access to information and applications;
• implementing data usage controls;
• logging, auditing and monitoring use;
• encrypting data both on servers and when it is being transferred;
Cyber Defense eMagazine – July 2021 Edition 130
Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.