When considering our online privacy and security, we often hold our financial records, bank accounts, and credit card numbers in the highest regard. After all, if a hacker gets this information, they have ‘the keys to the kingdom', right? It might be surprising to learn that the black market value of this data is actually surprisingly low.
The going rate for your social security number is about a dollar. Your credit card number is worth five dollars. A complete medical record, on the other hand, can sell for more than $1,000 on the Dark Web.
If you are a healthcare provider that accepts Medicare, then you have likely seen and heard the acronyms MACRA, MIPS, and EHR hundreds of times in 2017.
You may have chosen to attest to MIPS for the entire calendar year, or perhaps you are gearing up to begin reporting in the final 90 days of 2017. You also may have chosen to begin reporting in 2018. Whichever path you have selected, are you aware that before medical practices participate in MIPS they must prove that patient health information contained in EHR and elsewhere in their practice is protected by performing a security risk assessment (SRA)?
Hackers have found another way to extort the medical community and their patients. There's a disturbing trend of cyber-thieves targeting medical devices in doctors' offices and hospitals. The very medical devices that provide life saving treatment are now being targeted by hackers - for profit.