Medical patients face many risks, from dirty hospital mattresses to surgical supplies left in the body, but the most serious threat comes in the form of security hacking. This is the assessment of the ECRI Institute, which recently published a report on significant health hazards. Among the 10 hazards that patients should fear the most, the hacking of medical transcription material was at the top of the list.

security hacking medical records

ECRI Institute Reports

The Pennsylvania-based research organization recently published 50 cybersecurity alerts or related problems recorded over a period of 18 months, with the number of such events representing a dramatic increase noted during the previous period. According to David Jamison, the executive director of the ECRI Health Devices Program, the consequences of cyber attacks could be dire, including the physical harm or even death of patients. The ECRI report noted that after gaining access to medical transcription systems, hackers can fraudulently obtain personal records and, through the use of so-called ransomware software, can even threaten to publicly release the information.

Protecting Remote Systems

Remote systems are designed to be readily accessible to allow for easy review by those seeking medical information for legitimate reasons. However, this accessibility also makes them good targets for hackers. It was recommended in the report that health care organizations monitor and take steps to protect such systems. Improved security can be accomplished in various ways, including the enforcement of password policies, the constant monitoring of access activity and the proper maintenance of the systems themselves.
In a survey conducted by the professional services firm Marsh & McLennan, approximately half of the healthcare executives who were asked, reported implementing multifactor authentication methods for the purpose of protecting private networks. With regard to the threat posed by SamSam ransomware, the U.S. Department of Health and Human Services (HHS) had previously issued a warning that attackers using the software were breaking into network systems and exploiting open remote desktop protocol connections. In dealing with this problem, the HHS made several safety recommendations, including the placement of restrictions on who can remotely access computerized systems.

Other Risks to Patients

Other risks to patients appearing in the ECRI report included the contamination of mattresses with bodily fluids, the retaining of medical sponges in patients after surgical procedures, patient infections caused by the improper use of endoscopes and injuries caused by overhead patient lift systems. However, the hacking of medical transcription information was one of few threats that did not involve direct contact with the patients themselves.

FAQs

Why is hacking of medical transcription material considered a top health hazard?
Hacking of medical transcription material is a top health hazard because cybercriminals can access personal medical records and use ransomware to extort healthcare providers, potentially leading to the public release of sensitive patient information. Such breaches can cause serious harm, including physical threats to patients.

How can healthcare organizations protect remote systems from hackers?
Healthcare organizations can protect remote systems by enforcing strict password policies, continuously monitoring access activity, and regularly maintaining their systems. Multifactor authentication and limiting who can remotely access systems are also recommended security measures.

What are the consequences of a successful cyber attack on medical transcription systems?
The consequences can include the theft of personal medical records, the potential for identity theft, financial loss, and damage to patient privacy. In extreme cases, cyberattacks could even lead to physical harm or death due to compromised patient care.

What other patient risks were highlighted in the ECRI Institute report?
Other risks mentioned in the ECRI report include contamination of hospital mattresses, retention of surgical supplies like sponges, infections from improper use of endoscopes, and injuries from malfunctioning overhead patient lift systems.