The Healthcare industry continues to be the nation’s ID theft punching bag, walking around town with a giant red target on its back. Need some proof? Leave it to The Identity Theft Resource Center (ITRC) weekly report to come to the party with a big bucket of red paint. According to its’ August 11, 2015 report, the Medical/Healthcare industry accounts for a whopping 78% of the data records breached so far this year. In real numbers that means of the 140,000 records breached, Medical/Healthcare is the not-so-proud owner of 110,000 of those records.
Why does the Healthcare industry continue to be the biggest target? What makes Healthcare so prone to these attacks? And what on earth makes this industry so tempting to identity thieves?
- It’s Not Exactly About Financial Data.
So let’s be clear, it’s not about stealing financial data. Nope, that’s about stealing credit card numbers, expiration dates, cardholder names, and other similar data. And for those specific cybercriminals, it’s about getting credit card information from retailers and reselling that info for as little as $1 per number. The customer won’t be happy and the retailer (think Target, Home Depot) isn’t so happy either. But generally, customers can deactivate their cards and get a refund.
- It IS about Personal Information.
This is where the EIQ security healthcare solutions can help. EIQ’s SOCVue helps prevent unauthorized access to protected health information (PHI) and improve HIPAA compliance with 1) 24x7 security monitoring for critical healthcare IT infrastructure; 2)Log management, access control monitoring and HIPAA compliance reporting; and 3)Continuous assessment of security controls to reduce risk of an ePHI data breach.