AI & Data Analytics

Business

Cybersecurity

Data + Technology

Diversity, equity and inclusion

Financial Decision Making

Health equity

Healthcare Transformation

Interoperability & EHRs

Leadership

Management

Medical Devices

Mergers and Acquisitions

Patient Experience

Point of Care Tools

Politics

Pop Health Tech

Precision Medicine

Product Solutions

Providers in Practice

Safer Hospitals

Technology

Telehealth

Virtual Care

News

Media

Medical World News

Peer Exchange

Podcasts

Videos

Webinars

Conferences

Resources

Subscribe

About

Advertise

Editorial

Contact Us

Terms and Conditions

Privacy

Do Not Sell My Personal Information

Chief Healthcare Executive

LinkedIn

Spotlight

Topics

Mergers & Acquisitions

1rem

Authors

Electronic medical records have become a valuable commodity for criminals on the dark web. The problem might get worse before it gets better.

Combating the Dark Side of Healthcare

These are the vulnerabilities in the current health IT landscape.

Black Hat 2017: Securing the Internet of Things

The culmination of several factors has made the healthcare industry a perfect target for cybercriminals. Understanding those factors, experts say, is critical to creating a more secure industry moving forward.

Black Hat 2017: Key Cybersecurity Vulnerabilities for Healthcare Systems

Researchers at Black Hat USA described the growing threat of hacked medical devices.

Black Hat 2017: Hacking Healthcare Devices, Stopping Hearts and 'Jacking' Brains

By 2050, it's estimated that 139 million people worldwide will have dementia, but by today's standards, 60% will be undiagnosed. It's clear that there's a significant gap in dementia detection and care, but what can your organization do about it?

Get perspectives from clinical leaders and neuroscience experts about the underlying causes and consequences of these gaps, practical opportunities to address them, and a proven roadmap that shows how leading health systems have successfully transformed their dementia screening and care processes.

Closing the Dementia Care Gap: Expert Insights and Proven Strategies for Health Systems

Hospitals and health systems are paying more attention to cybersecurity, because they have no other choice.

Hundreds of cyberattacks have taken place this year, including the 

, which disrupted almost all hospitals nationwide. Other health systems have weathered attacks.

Chief Healthcare Executive® has reported extensively on cybersecurity over the past few years, and it looks to be an issue that will garner heavy coverage in years to come. Beyond reporting on the attacks, we’ve shared insights from key cybersecurity experts. Now, we’re looking to do a bit more.

Recently, Chief Healthcare Executive® assembled a panel discussion with three leading cybersecurity experts: John Riggi, national advisor for cybersecurity and risk for the American Hospital Association; Lee Kim, senior principal of cybersecurity and privacy at HIMSS; and Adam Zoller, the global chief information security officer for the Providence health system.

Today, we’re presenting the first of a series of videos from that discussion. 

(Here’s the video. The story continues below.)

Experts from the American Hospital Association, Providence, and HIMSS discuss cyberattacks

Cybersecurity panel discusses attacks on hospitals

In this discussion, the cybersecurity panel looked at the scope of recent attacks.

“Cyberattacks against hospitals and health systems continue to increase at a very alarming rate,” Riggi said. “Last year, in terms of data theft attacks, hospitals and health systems suffered the worst year in terms of data breaches and ransomware attacks. In fact, we ended the year with over 136 million individuals in the United States.”

And the number of victims is almost certain to be higher this year. The Change Healthcare cyberattack alone affected 100 million Americans, according to the U.S. Department of Health & Human Services. It’s being called the most significant cyberattack affecting healthcare in U.S. history. Riggi pointed out that 

a Russian ransomware group, Black Cat, claimed responsibility

“They understood they would be attacking the entire healthcare sector,” Riggi said. “Every hospital and health system in the country was affected either directly or indirectly, by this attack, and it was a very significant disruption.”

The Providence health system constantly defends against cyberattacks, Zoller said.

“This year has been a pretty wild year for healthcare,” Zoller said. “Personally, Providence has been targeted by thousands of attacks, as we are every year. We've thwarted these attacks. We've been able to, knock on wood, stay ahead of these attacks, but the attacks are growing in sophistication. They’re growing in volume.”

A majority of cybersecurity healthcare professionals

 say their organization has experienced a security incident in the past year, according to HIMSS.

When it comes to cyberattacks, Kim said, “It's not a matter of if, but when.”

But Kim said while attacks are becoming increasingly sophisticated, hospitals and healthcare organizations are making strides in cybersecurity.

“I've seen extremely large strides in terms of growth, in terms of cybersecurity maturity, stakeholders getting more on board,” Kim said. “There are a lot more healthcare organizations that are realizing that cybersecurity is part of their business.”

The experts noted that private health information is extremely valuable, which is why ransomware groups are targeting hospitals and other providers. The panel noted that those attacks can threaten patient care, and 

“I think the perception is, rightly or wrongly, that healthcare systems are more willing to pay the criminals,” Zoller said.

Check out the video for more analysis and perspective on cyberattacks in healthcare.

Important note: This is the first video from our wide-ranging conversation. We’ll be publishing other installments over the next few weeks with more perspective from our experts on cybersecurity. Our thanks to these experts for sharing their knowledge and insights on such an important topic for the healthcare industry.

Chief Healthcare Executive hosted a discussion on cybersecurity with leading experts from the American Hospital Association, HIMSS and the Providence health system. They talked about the growing problem of cyberattacks.

Topic

Cybersecurity panel: The scope of recent ransomware attacks in healthcare

Hospitals are healthcare organizations have faced the constant threat of cyberattacks in recent years, but 2024 illustrated just how disruptive breaches can be.

So it may not be surprising that our stories of cybersecurity have gained a wide audience. In fact, all five of the most well-read healthcare technology stories over the past year involved cybersecurity and cyberattacks.

Ransomware groups are employing more sophisticated attacks and hospitals are struggling to keep pace, even as more organizations are devoting more resources to cybersecurity, said John Riggi, national advisor for cybersecurity and risk for the American Hospital Association. Riggi and other experts participated in a 

“Cyberattacks against hospitals and health systems continue to increase at a very alarming rate,” Riggi said.

Here’s a look at costly and damaging breaches. It’s a safe bet that cybersecurity is going to remain a top concern of healthcare leaders in 2025.

Kaiser Permanente breach may affect 13 million people: Questions & answers

The California-based health system suffered a breach that affected over 13 million Americans, and it says something that it’s not even the biggest data breach in the healthcare industry over the past year.

Still, a breach of Kaiser Permanente is notable given its wide reach. Kaiser Permanente operates 40 hospitals in several states and its health plan has about 12.5 million members.

Health systems must notify the U.S. Department of Health & Human Services of any breach affecting more than 500 people. Kaiser Permanente told the department 13.4 million were affected, according to the 

Kaiser Permanente said there was no exposure of Social Security numbers, financial account information or credit card numbers.

Kaiser Permanente says online technologies may have sent personal information to other parties, including Google, Microsoft Bing, and X, the social media platform formerly known as Twitter.

Cybersecurity panel: How hospitals can protect their systems and their patients

Hospitals affected by cyberattack of UnitedHealth subsidiary

The cyberattack of Change Healthcare, a subsidiary of UnitedHealth Group, has been 

the most damaging attack ever in the healthcare industry

In February, it became clear that the attack on change healthcare was affecting hospitals and other health providers. It would soon become clear that the breach disrupted providers across America, because Change Healthcare provides services to so many providers across the industry, including billing and prescription services.

 suffered a financial impact from the breach with payments being delayed, according to a survey from the American Hospital Association.

UnitedHealth said the breach affected 100 million people,

 or roughly one in three Americans. In 2023, all of the health data breaches reported that year affected 130 million Americans, according to 

. The Change Healthcare attack approached that figure.

The attack also received heavy mainstream media coverage, shedding more light on the growing problem of cyberattacks in healthcare.

Change Healthcare cyberattack: VA notifies 15 million veterans of breach

The Change Healthcare attack also affected the nation’s veterans.

The Department of Veterans Affairs sent notices to 15 million veterans about the breach. Change Healthcare provides a variety of services for the VA, including filling prescriptions.

Lawmakers have criticized UnitedHealth Group

 for failing to employ sufficient security measures in light of the breach, and have also called on the government to exercise more oversight to ensure there is better cybersecurity in the healthcare sector.

U.S. Sen. Ron Wyden, D-Oregon, is calling on the health department to require healthcare organizations to meet some basic cybersecurity standards.

“It is clear that HHS’ current approach to healthcare cybersecurity — self-regulation and voluntary best practices — is woefully inadequate and has left the health care system vulnerable to criminals and foreign government hackers,” Wyden said in a 

Michigan hospital system suffers cyberattack, again

The McLaren Health Care system confirmed this summer that it had experienced a cyberattack, and unfortunately, it wasn’t the first breach the Michigan system has suffered.

In the fall of 2023, McLaren experienced a cyberattack, so the system suffered two breaches within the space of a year.

Citing limited access to key systems, McLaren said some non-emergency appointments, treatments and tests were postponed and had to be rescheduled. Ambulances were temporarily diverted from McLaren Port Huron Hospital, 

McLaren operates 13 hospitals in Michigan, along with a host of ambulatory surgery centers and clinics. McLaren also operates health plans covering more than 700,000 people in Michigan and Indiana.

The 10 largest data breaches of the first half of 2024

Chief Healthcare Executive® reviewed the 10 largest health data breaches of 2024, and even at the midyear mark, it was clear that the industry was seeing some damaging attacks.

Those 10 breaches alone affected more than 31 million Americans, and it’s worth noting that didn’t include the Change Healthcare breach. While the Change Healthcare ransomware attack had already happened, it wasn’t clear at that point how many people were affected. Given the scope of the Change Healthcare attack, it’s likely that the number of Americans impacted by cyberattack in 2024 will be substantially higher than a year ago.

In the first six months of 2024, there were 341 breaches of health data reported to the U.S. Health Department.

Health systems continue to experience breaches that are costly and hampering patient care. 

Kaiser Permanente, UnitedHealth Group and other cyberattacks: the most popular technology stories of 2024

Bob S. Carter, MD, has been named the new CEO of University of Utah Health.

Carter will take on the new role in February 2025. He will also be the university’s vice president of health sciences.

A neurosurgeon, Carter will lead an academic health system with 17 hospitals and community health centers and $6.3 billion in revenue. The health system also has a research portfolio of nearly $500 million.

He succeeds Michael Good, who has led U of U Health for more than six years.

Carter said he’s been impressed by the system’s “enthusiasm, collaborative spirit and warmth.”

“U of U Health, and its dedicated faculty, staff and students, are at a unique inflection point,” Carter said. “I am impressed by what they have accomplished already as a team. And I am particularly drawn to the vision of the University of Utah as a public university striving to improve every person’s life, and U of U Health’s shared missions of leading-edge health care, curing through discovery and enlightening tomorrow’s leaders.”

Carter currently serves as a professor in neuroscience at Harvard Medical School and is Neurosurgeon-In-Chief at Mass General Brigham, Massachusetts General Hospital and Brigham and Women’s Hospital.

Mercy hospital system appoints physician as COO

For the first time, the Mercy health system has chosen a doctor to serve as the system’s chief operating officer.

John Mohart, MD, has been named COO of the Missouri-based system, which operates 50 hospitals and more than 1,000 physician practices. Mohart joined Mercy in 2012 as a cardiologist, and he most recently served as Mercy’s president of community operations.

“I am devoted to health care and to Mercy’s mission of pioneering new models of care so that health care is accessible, affordable and sustainable,” Mohart said in a statement. “It’s a privilege to serve, lead and grow Mercy’s vision and mission in today’s ever-changing health care landscape.”

Steve Mackin, Mercy’s president and CEO, said the system is putting more doctors in top leadership positions ‘because we believe they are key to getting health care right.”

“Dr. Mohart’s passion as a physician and his strong belief that every co-worker is a caregiver will ensure that we prioritize what’s best for our patients and our team at Mercy as we enter our third century of care,” Mackin said in a statement.

Sean Kamber has been appointed the new chief executive officer of the Menorah Medical Center.

The hospital, based in Overland Park, Kansas, is part of HCA Midwest Health, a division of HCA Healthcare.

Kamber comes to Kansas after working with HCA Healthcare’s North Texas Division, where he has served six years as CEO of Medical City Weatherford. He brings nearly 15 years of experience in healthcare leadership roles.

He said he is honored to lead “a hospital with a rich legacy of serving the community with innovative healthcare solutions.”

“I look forward to working with this dynamic and talented team to continue leading the way to ensure high-quality and compassionate patient care is delivered to the communities we serve and that collaborative, transformative healthcare with state-of-the-art technology and services continues to be the focus of our mission,” Kamber said in a statement.

He worked as vice president of rural and community outreach in HCA Healthcare’s Gulf Coast Division. He also previously served as Medical City Weatherford’s chief operating officer.

Cook Children’s chief medical officer retires, successor named

After 17 years as chief medical officer of Cook Children’s in Fort Worth, Texas, James Cunningham, MD, is retiring.

The pediatric system has named his successor. Jonathan Nedrelow, MD, who most recently served as senior vice president and associate chief medical officer at Cook Children’s, moves into the role of chief medical officer.

Cunningham joined Cook Children’s in 1987, and has held a variety of roles in the organization.

“"This place has been a significant part of my life for a long time. Many of my adult friendships are centered around it, and it's been rewarding to watch its growth,” Cunningham said in a statement.

Nedrelow saluted Cunningham’s service to Cook Children’s.

“His legacy can be found in all the children that had a chance to grow up healthier because of him. Personally, words cannot describe the gratitude I have for the mentorship and friendship he extended to me,” Nedrelow said in a statement.

Cunningham said Nedrelow is “exceptionally qualified” to be the system’s chief medical officer.

“He's highly intelligent, well-respected, and I'm confident that the program is in great hands with him,” Cunningham said.

Mercy names a physician as COO, and other leaders make news.

University of Utah Health hires new CEO, and more | MED MOVES

Just two weeks before telehealth waivers are set to expire, Congress has shown support for an extension of virtual care programs.

 to fund government programs into March, and telehealth advocates said a spending plan included measures to extend telehealth programs.

The package included a two-year extension for most telehealth programs, and a five-year extension for hospital-at-home programs, according to the American Telemedicine Association.

Congress approved broad extensions of telehealth programs early in the telehealth pandemic, but those waivers were set to expire Dec. 31.

Telehealth advocates and a broad array of healthcare providers 

have been pressing Congress and President Biden’s administration

 to approve an extension of telehealth programs. They’ve been increasingly anxious as the end-of-year deadline has approached.

Lawmakers have also been grappling with another pressing deadline, as government agencies will shut down Friday night without new spending legislation. 

Now, uncertainty looms with the collapse of a deal on the overall spending bill. Republicans aren't supporting the temporary spending bill after President-elect Donald Trump and Elon Musk denounced the deal, as 

Kyle Zebley, the senior vice president of the American Telemedicine Association, has called this the “Telehealth Super Bowl,” and he’s hoping for a win, even as the contest moves late into the fourth quarter.

“The extensions in this proposed legislation are very meaningful for countless Americans and would give our healthcare providers and hospital systems some certainty and the confidence needed to continue to invest in needed telehealth services,” Zebley said in a statement.

“This has been years in the making, and we must ensure that these extensions are kept intact as they go to vote in both chambers of Congress and then on to President Biden for signature.”

The measure included language to enable health systems to provide cardiopulmonary rehabilitation services via telehealth to Medicare beneficiaries in their home in 2025 and 2026. The package also included a five-year extension of the Medicare Diabetes Prevention Program Expanded Model through 2030, allowing services to be delivered virtually.

Anders Gilberg, senior vice president of government affairs for the Medical Group Management Association, said the group is “pleased that Congress heeded our call to extend telehealth flexibilities through the end of 2026.” But the group said it’s frustrated that Congress hasn’t averted planned Medicare payment cuts to physicians.

Healthcare providers and trade groups have long expressed optimism that Congress and the Biden administration would ultimately sign off on an extension of telehealth programs. The House & Energy Commerce Committee passed the 

 unanimously with a 41-0 vote in September.

Republicans and Democrats in Congress have both expressed strong support for telehealth programs. But healthcare advocacy groups expected that Congress 

would likely deal with telehealth extensions in end-of-year spending bills

, particularly with lawmakers spending so much time on the election in the fall. With the end of the year drawing closer, telehealth supporters have been sweating a bit.

Zebley is hopeful that providers won’t have to worry about virtual care programs being disrupted.

“This is shaping up to be a historic week for advancing telehealth and puts us on a path towards a modernized healthcare system,” Zebley said in a statement.

Health systems have expressed cautious optimism about a five-year extension of hospital-at-home programs. Nationwide, 378 hospitals in 39 states are providing acute care at home, according to 

 from the Centers for Medicare & Medicaid Services.

More providers are offering hospital-at-home programs

, but some have been wary of launching such services until they get more certainty about the prospect of long-term reimbursements.

Last month, the federal government approved an extension for 

providers to continue remote prescriptions

 of certain controlled substances, such as Oxycontin and Xanax, through 2025.

Lawmakers added measures to extend telehealth and hospital-at-health programs to a bill to avoid a government shutdown. But the spending plan fell apart.

Telehealth extensions have support in Congress, but spending deal collapses

One Device. 70 Seconds. Comprehensive insights that work for every patient, every time.

InBody is a precise body composition analyzer that's easy to integrate in any practice, delivering accurate health data in 70 seconds or less.



Fill out the form below to download the InBody 2024 Research e-book:

Karen Epper Hoffman

Articles

Latest Updated Articles