65% of the 100 largest US hospitals and health systems have had a recent data breach
65% of the 100 largest US hospitals and health systems have had a recent data breach
cybernews.com
Attention Required! | Cloudflare
14 comments
-
Most organizations in the US don't value cybersecurity as anything more than an abstract concept. The reasons for that can be numerous but in my experience it's usually a combination of cost + survivorship bias.
Lack of serious consequences is another factor. Had a breach? Pay a small fine and an even smaller settlement (or should I say your insurance pays) and then it's back to business as usual. Even in situations where the breach is due to gross negligence, the consequences are minimal (see Equifax).
-
In my experience it has been that the company cares about security but they keep hiring the cheapest contractors from India who know nothing about security and they introduce holes faster than onshore developers can fix them.
Either way, you can point to cost cutting as the underlying root cause.
-
I wish we could make fines a percentage of unrealized gains that are over a certain amount. That would make some of them care.
-
-
Stand by while I work out what 65% of 100 is.
-
Did ... Did you ever figure this out?
-
Yes. It's about ¾. Less, I think. But more than ½.
-
-
65 per 100 of the 100 largest.... nope, I've got nothin'.
-
-
People making these decisions are getting paid millions!
While nurses get fucked
Welcome to America!
-
Hospital near me has password requirements for their electronic medical records system as:
- 6 characters, no more, no less
- 2 characters must be a number
- 4 characters must be a letter
- case insensitive
- never changed
And for new hires and what not, they tell them to use
{hospital abbreviation}{2 digit year}. Likecasu24No freaking wonder
14 comments