Tag archives: cybersecurity

COVID-19 Update: U.S. and U.K. Issue Joint Alert Regarding COVID-19 Research Cyber Threat

The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency and the U.K.’s National Cyber Security Centre issued a joint alert on Tuesday that advanced persistent threat groups “are actively targeting organizations involved in both national and international COVID-19 responses.” This warning should be heeded by hospitals, health systems, pharmaceutical companies, and academic medical … Continue reading

Anthem to pay US$115M to settle lawsuit relating to 2015 data breach

By Jeewon Kim Serrato (US) and Savannah Wiseman (US) on September 12, 2018 Posted in Enforcement

Anthem Inc. has agreed to a US$115 million settlement to resolve a class action lawsuit relating to a 2015 cyberattack that compromised data on 79 million individuals. Anthem has denied any wrongdoing. In February of 2015, Anthem reported that hackers stole personally identifiable information from millions of current and former customers, including names, addresses, social … Continue reading

OIG considers new safe harbors and other incentives to promote coordinated care

By Elise LeGros (US) on September 5, 2018 Posted in Regulatory

As part of the Health and Human Services Department’s (“HHS”) “Regulatory Sprint to Coordinated Care” efforts aimed at alleviating unnecessary regulatory barriers to coordinated care while protecting against fraud and abuse, the Office of Inspector General (“OIG”) issued a Request for Information (“RFI”) on August 27, 2018, requesting public input on the following items: Care … Continue reading

NIST releases latest version of its Cybersecurity Framework

By on April 19, 2018 Posted in Regulatory

On April 16, 2018, the National Institute of Standards and Technology (NIST) unveiled Version 1.1 of its widely known Cybersecurity Framework, which incorporates changes based on feedback collected through comments, questions, and workshops held in 2016 and 2017. The Cybersecurity Framework aims to focus on industries vital to national and economic security, including energy, banking, … Continue reading

FDA issues final guidance on postmarket medical device cybersecurity

By Anna Rudawski (US) on January 6, 2017 Posted in FDA & Food Safety

On December 28, 2016, the U.S. Food and Drug Administration (FDA) released final guidance on the management of cybersecurity vulnerabilities for marketed and distributed medical devices. The guidance establishes a risk-based approach for the reporting of medical device cybersecurity vulnerabilities to the FDA. The FDA guidance reflects the agency’s concerns that cybersecurity vulnerabilities in networked … Continue reading