Hospital cyber attacks increasing sharply

INDIANAPOLIS – As if a trip to the doctor or hospital isn’t enough to put a person on edge, Americans are now living in a world where their sensitive medical information is at increasing risk from cyber criminals who target health care systems.

Hospital hacks and medical data breaches are increasing across the nation.  That’s because the breaches are becoming big business for people who hack into hospital system computers, demanding ransom for the sensitive information they steal.

In Indiana, Community Health Network has had several cyber security breaches within the last year.  I.U. Health had a breach last summer.  In the last few years, hackers have also targeted Johnson Memorial Health, Franciscan, Ascension and Eskenazi Health Systems.

Hackers are getting bigger payouts.  Paydays for hackers who demand ransom from hospital systems jumped from $5,000 in 2018 to $1.5 million last year, according to the Associated Press.

So how do you know if your information has been leaked in a hospital breach?  The watchdogs at Trend Micro point out the following signs:

  • Receiving notifications: You may get letters, emails, phone calls or text messages that tell you that your data was breached. Be cautious and check if they are legitimate or fake.

  • Receiving bills or statements: You may get bills or statements that show charges or services that you did not get or agree to. These may mean that someone else used your data to get medical care, drugs or devices in your name.

  • Receiving calls or letters: You may get calls or letters from people who say that you owe money or that you are in trouble because of something related to your health information. This may mean that someone else used your data to commit fraud in your name.

  • Checking your credit report: You should check your credit report regularly and look for anything that you don’t recognize. If you find anything, it may mean that someone else has used your personal information to open new accounts, apply for loans or buy things in your name.

Breaches of this sort carry significant risk for those whose information is compromised by a hacker, according to Trend Micro:

  • Identity theft: Hackers can use your personal information, such as your name, date of birth, Social Security number and address, to impersonate you and open new accounts, apply for loans or file bogus tax returns.

  • Medical identity theft: Hackers can use your medical information, such as your health insurance number, medical records and prescriptions, to get medical care, drugs or devices in your name.

  • Emotional distress: Hackers can expose your sensitive information, such as medical conditions, treatments or test results, which can make you feel violated, embarrassed and anxious.

  • Legal and regulatory consequences: Hackers can use your health information to commit fraud or other illegal activities in your name, which can get you into trouble with the authorities.

  • Compromised patient safety: Hackers can tamper with your medical records, which can lead to wrong diagnoses, treatments or prescriptions.

Trend Micro also suggests these tips to protect your information:

  • Keep your apps and systems up to date: Install the latest software updates for your devices and applications because they can fix vulnerabilities and bugs that hackers can exploit.

  • Use secure networks: Avoid using public or unsecured Wi-Fi networks when accessing your health records or accounts online as this can expose your data to network eavesdroppers and interceptors.

  • Secure mobile devices: Mobile devices such as smartphones and tablets can store and access your health data. Use a lock screen or biometric authentication to prevent unauthorized access to your device.

  • Implement security protocols: Be aware of the security policies of your healthcare providers and ask them how they protect your data. Review medical records and bills regularly and report any errors or discrepancies to your providers.

  • Protect your identity and personal information: Compromised personal data can have serious consequences, including identity theft, financial fraud, and job losses. The best thing you can do is a) have reliable cybersecurity protection, and b) ensure you will find out ASAP in the event of being affected. We would encourage readers to head over to ID Protection, which has been designed to meet these challenges.

If you suspect your information has been leaked, it’s a good idea to freeze your credit.  That will keep someone from opening any new accounts or applying for loans in your name.

For the latest news, weather, sports, and streaming video, head to WTTV CBS4Indy.