Becker's Hospital Review

44 CIO / HEALTH IT Hackers hit Las Vegas hospital, steal data and post online: 5 details By Hannah Mitchell L as Vegas-based University Medical Center was hit in a ransomware attack by an infamous hacker group, according to a June 29 report by the Las Vegas Review-Journal. Here are five things to know: 1. e hacker group, REvil, posted personal data online that it had obtained in the cyberattack. 2. e victims' driver's licenses, passports and Social Security cards were uploaded to the hacker group's website, which was reviewed by the Review-Journal. e number of patients affected was unknown. 3. e hospital confirmed the attack in a June 29 statement issued to the Review-Journal, stating that the hackers accessed a server used to store data in mid-June. 4. "is type of attack has become increasingly common in the healthcare industry, with hospitals across the world experiencing similar situ- ations," the statement said. 5. REvil is a well-known ransomware group that leaks patients' data if they are not paid. e malware they deploy, Sodinokibi, is the most common and accounts for about 14 percent of healthcare attacks. n Ohio health system employee snooped 7,000+ patients' EHRs for 11+ years By Jackie Drees C anton, Ohio-based Aultman Health Foundation began notifying around 7,300 patients that their protected health information had been inappropriately accessed by a former health system employee over the past decade, The Daily Record reported June 25. The former employee accessed patient information outside the scope of their job responsibilities between Sept. 14, 2009, and April 26, 2021. The employee was not publically identified. However, the employee was fired and no longer has access to patient data, the health system said. The employee accessed patients' names, Social Security numbers, health insurance information, addresses, birthdates and treatment information, according to the report. The employee was not a medical provider and had access to patient records as part of their job coordinating patient care. Aultman is offering patients whose Social Security numbers may have been compromised free credit and identi- ty monitoring services. The health system is also rolling out new training for its employees to prevent similar incidents from happening. The Aultman Health Foundation includes Aultman Hospital, Aultman Orrville Hospital, Aultman Alliance Community Hos- pital, health insurance provider AultCare, the Aultman Foundation and Aultman College. n Meditech names new CEO By Katie Adams M editech appointed Michelle O'Connor as its president and CEO, the EHR company said July 13. Ms. O'Connor joined Meditech in 1988 as an implementation programmer, and her most recent role was president and COO. She is taking over for Howard Messing, who now serves as the vice chair for the company's board of directors. "We have already seen firsthand how innovations such as the cloud and virtual care can make a huge difference for clini- cians and the communities they serve," Ms. O'Connor said. "And collaborating with our great team of technology profes- sionals, I know we will continue to innovate in ways that meet the evolving needs of our customers." Meditech maintains 16 percent of the EHR market share and 15 percent of hospital beds, according to KLAS Research. n

• Cover