Becker's Hospital Review

39 CIO / HEALTH IT 53% of Healthcare Orgs Don't Test Medical Device Security, Survey Finds By Jessica Kim Cohen T he majority of healthcare providers (56 percent) and medical device manufac- turers (67 percent) believe an attack on one of their medical devices is likely within the next year, according to a Ponemon Insti- tute survey. e survey, sponsored by Synopsys, details responses from roughly 550 manufacturer and provider representatives whose roles in- volve medical device security. ese devices include radiation equipment, robots and di- agnostic and monitoring tools. Here are five survey findings. 1. Eighty percent of both providers and man- ufacturers said medical devices are difficult to secure. Providers (58 percent) and manufac- turers (53 percent) agreed a lack of quality as- surance and testing procedures are key issues with securing devices. 2. e majority of providers (53 percent) said they do not test medical devices for security. Forty-three percent of manufacturers report- ed the same. 3. Five percent of providers and 9 percent of manufacturers said they test medical device security at least once a year. 4. Fieen percent of providers reported tak- ing "significant steps" to prevent medical de- vice attacks, compared to 17 percent of man- ufacturers. 5. One-third of providers and manufacturers said they don't have a designated person or function in their organization responsible for medical device security. n WannaCry Attack Infects Bayer Medical Devices in US Hospitals By Mackenzie Bean B ayer confirmed in May the worldwide ransomware attack, WannaCry, infected several of its medical devices used in U.S. hospitals, Forbes reported. Here are five things to know. 1. An anonymous source sent Forbes an image of an infected de- vice from an unspecified U.S. hospital. While the source did not specify which device model was hacked, it appears to be radiol- ogy equipment used to improve imaging for MRIs, according to the report. The device is manufactured by Medrad, which Bayer acquired in 2011. 2. A Bayer spokesperson told Forbes it received two reports from U.S. customers saying WannaCry infected their Bayer devices, al- though the company did not say which products were affected. "Operations at both sites were restored within 24 hours," the spokesperson told Forbes. "If a hospital's network is compro- mised, this may affect Bayer's Windows-based devices connected to that network." 3. Beau Woods, deputy director of the Atlantic Council's Cyber Statecraft Initiative, said an infection on this type of equipment is not likely to threaten patient safety, as it would simply stop the scanning machines from working properly, according to the re- port. 4. Bayer plans to release a Microsoft patch for Windows-based de- vices "soon," the spokesperson told Forbes. In the meantime, the company recommends hospitals using Bayer radiology equip- ment work with their IT security teams and contact Bayer's techni- cal assistance center to ensure the devices are safe and working properly, reports Forbes. 5. The infected devices represent the first known occurrence of ransomware directly influencing a medical device's operations, according to the report. n 10 Hospitals With the Most Social Media Activity, as Ranked by Hyp3r By Jessica Kim Cohen H yp3r, a San Francisco-based social engagement platform, on May 22 launched its Geosocial Index. The Geosocial Index aggregates public social media activity shared from locations like airports, hos- pitals, hotels, stadiums and theme parks. Hyp3r then ranks these places on a scale of zero to 100, based on the number of posts, number of users and the reach per post. Hyp3r's goal is to create a standardized consumer en- gagement ranking to compare different places across their given industry. Here are the top 10 hospitals with the most social media activity as of May 30. 1. Providence Saint Joseph Medical Center (Burbank, Calif.) 2. Children's Healthcare of Atlanta at Scottish Rite 3. Henry Ford West Bloomfield (Mich.) Hospital 4. Children's National Medical Center (Washington, D.C.) 5. Children's Medical Center Dallas 6. Children's Hospital Los Angeles 7. Cleveland Clinic 8. Nicklaus Children's Hospital (Miami) 9. University of Maryland Medical Center (Baltimore) 10. Nationwide Children's Hospital (Columbus, Ohio) n

• Cover