197
Review on Communication Security Issues in IoT Medical Devices
TABLE 10.2
Recent Health Care Data Breaches
Data Breach
Year
Consequences
Hackers breach Mass General
vendor and compromise 4, 300
health care records
2016
The Mass General Hospital data hacking of 4,300 patient
dental records, medical id numbers, social security
numbers, and other identifying information was stolen
and/or compromised.
This breach demonstrated that even utilizing the services of
a third-party vendor hired to assist with management of
patient data information leaves the organization open to
data breaches and theft of patient information. Mass
General Hospital (MGH) contracted with Patterson Dental
Supply, Inc. (PDSI), specifically for the purpose of safely
and securely managing their patients’ data (Akanksha
2016).
US vice-president on hacking into
his pacemaker
2013
Former US vice-president Dick Cheney told the truth in a
meeting to CBS’ “an hour,” uncovering that when he had
an implanted device to manage his heart pulse in 2007, he
had his specialists turned off its remote capacities to protect
against possible assassination attempts (Dan 2013).
Anthem health care industry
affected by hacking, almost 80
million records were disclosed
2014
Anthem was the victim of the largest data breach in the
health care industry. In the cyber attack that occurred in
December 2014, Anthem found that hackers might have
stolen the names, social security numbers, addresses,
income data, and health care identification numbers of
nearly 80 million customers. In addition, and perhaps
equally as concerning, was the fact that Anthem believed,
but could not confirm, that medical records or credit cards
of customers were compromised (Charlie 2015).
Banner Health identifies
cyber-attack
2016
A data breach at Banner Health compromised at least
3.7 million people. Compromised information included
the names of patients and their physicians, Social Security
numbers, and health insurance information. The first times
ever, information gathered from purchases made at
vending machines, including cell phone and payment data,
was also compromised. Banner Health is yet to determine
how hackers were able to infiltrate the organization’s
servers and computer systems (Anonymous 2016c).
Premera Blue Cross reveals
cyber-attack that affected
11 million customers
2015
In 2015, over 11 million customer data records were
compromised as a result of illicit access to Premera Blue
Cross’ networks by an unknown hacker. While information
compromised was very similar to the Anthem data breach,
Premera announced that this data breach might have also
compromised customers’ banking information and detailed
insurance claims of customers dating as far back as 2002
(Huddleston 2015).
Hospital network hacked and
nearly 4.5 million records
compromised
2014
Community health care systems in the United States
which operates 206 hospitals, fell victim to a cyber attack
resulting from hackers exploiting heart bleed, a known
SSL vulnerability. As a result, 4.5 million patients had
their names, date of birth, and social security numbers
potentially stolen in a cyber attack that may have been
connected in some way to the Anthem data breach
(Jose 2014).
Review on Communication Security Issues in IoT Medical Devices
TABLE 10.2
Recent Health Care Data Breaches
Data Breach
Year
Consequences
Hackers breach Mass General
vendor and compromise 4, 300
health care records
2016
The Mass General Hospital data hacking of 4,300 patient
dental records, medical id numbers, social security
numbers, and other identifying information was stolen
and/or compromised.
This breach demonstrated that even utilizing the services of
a third-party vendor hired to assist with management of
patient data information leaves the organization open to
data breaches and theft of patient information. Mass
General Hospital (MGH) contracted with Patterson Dental
Supply, Inc. (PDSI), specifically for the purpose of safely
and securely managing their patients’ data (Akanksha
2016).
US vice-president on hacking into
his pacemaker
2013
Former US vice-president Dick Cheney told the truth in a
meeting to CBS’ “an hour,” uncovering that when he had
an implanted device to manage his heart pulse in 2007, he
had his specialists turned off its remote capacities to protect
against possible assassination attempts (Dan 2013).
Anthem health care industry
affected by hacking, almost 80
million records were disclosed
2014
Anthem was the victim of the largest data breach in the
health care industry. In the cyber attack that occurred in
December 2014, Anthem found that hackers might have
stolen the names, social security numbers, addresses,
income data, and health care identification numbers of
nearly 80 million customers. In addition, and perhaps
equally as concerning, was the fact that Anthem believed,
but could not confirm, that medical records or credit cards
of customers were compromised (Charlie 2015).
Banner Health identifies
cyber-attack
2016
A data breach at Banner Health compromised at least
3.7 million people. Compromised information included
the names of patients and their physicians, Social Security
numbers, and health insurance information. The first times
ever, information gathered from purchases made at
vending machines, including cell phone and payment data,
was also compromised. Banner Health is yet to determine
how hackers were able to infiltrate the organization’s
servers and computer systems (Anonymous 2016c).
Premera Blue Cross reveals
cyber-attack that affected
11 million customers
2015
In 2015, over 11 million customer data records were
compromised as a result of illicit access to Premera Blue
Cross’ networks by an unknown hacker. While information
compromised was very similar to the Anthem data breach,
Premera announced that this data breach might have also
compromised customers’ banking information and detailed
insurance claims of customers dating as far back as 2002
(Huddleston 2015).
Hospital network hacked and
nearly 4.5 million records
compromised
2014
Community health care systems in the United States
which operates 206 hospitals, fell victim to a cyber attack
resulting from hackers exploiting heart bleed, a known
SSL vulnerability. As a result, 4.5 million patients had
their names, date of birth, and social security numbers
potentially stolen in a cyber attack that may have been
connected in some way to the Anthem data breach
(Jose 2014).