• Skip to main content
  • Skip to secondary menu
  • Skip to primary sidebar
  • Skip to secondary sidebar
  • Skip to footer

  • COVID-19
  • Opinion
  • Health IT
    • Behavioral Health
    • Care Coordination
    • EMR/EHR
    • Interoperability
    • Patient Engagement
    • Population Health Management
    • Revenue Cycle Management
    • Social Determinants of Health
  • Digital Health
    • Artificial Intelligence
    • Blockchain
    • Mobile Health
    • Precision Medicine
    • Telehealth
    • Wearables
  • Startups
  • M&A
  • Value-based Care
    • Accountable Care (ACOs)
    • Medicare Advantage
  • Life Sciences
  • Research

Top 10 Hacking Exposure Areas for Healthcare IT Systems

by HITC Staff 02/01/2016 Leave a Comment

  • LinkedIn
  • Twitter
  • Facebook
  • Email
  • Print

Security Data Breaches_Top 10 Hacking Exposure Areas for Healthcare IT Systems

Meditology Services, a professional services company specializing in IT solutions for healthcare organizations, announced new research based on a two year study from 2013-2015. As a follow up to this research endeavor, Meditology has released a white paper focused on ethical hacking, also known as penetration testing, and why it is a very effective way to test the security of healthcare information systems.

The paper, “Hacking Healthcare: Real-world Healthcare Security Exposures from Penetration Tests,” drives an increased awareness of the need for the healthcare industry to harden systems against both external and internal threats. The paper also helps healthcare organizations understand how to take a proactive security stance based on the concepts, methodology, approaches, and a description of various real-world penetration testing and related results.

According to the Ponemon Institute, criminal attacks on healthcare organizations have increased 100 percent since 2010 and represent the highest per-record cost to companies across industries.

Anatomy of a Penetration Test

Depending on the organization’s size and complexity, thorough penetration testing can take weeks to carry out and involves reconnaissance, surveying, testing and reporting to produce a final analysis across exposure areas. The paper outlines the top 10 hacking exposure areas based on the results of testing including physical security, phishing, medical devices, passwords and more. Both internal and external tests must be considered to address the full range of attack vectors.

“Hackers have expanded focus from technical vulnerabilities in public facing applications and networks to sophisticated social engineering and phishing attacks that psychologically manipulate people into divulging information,” Selfridge continues. “Medical devices also present an increasingly popular access point as they are configurable, and interconnected.”

Regular penetration testing is essential for organizations to identify weaknesses and gain the support they need to prevent data breaches. Domain expertise in the healthcare industry should be a top requirement when engaging a security firm to conduct penetration testing as patient safety, unique application issues, and specific regulatory requirements create a complex landscape that is different from other industries.

The following list is the top 10 most common security exposure areas that Meditology has observed from penetration tests of healthcare organizations across the country from the period of 2013 through 2015

1. Weak & Easily Guessable Passwords

2. Plain-text Credentials

3. Missing Critical Security Patches/Outdated OS’s

4. Weak Database Administrative Passwords

5. Generic or Default Accounts & Passwords

6. Network Shares with Improper Access Controls

7. Unauthenticated VNC Remote System Access

8. Insecure File Transfer Protocol (FTP)

9. Physical Security Gaps

10. Social Engineering Weaknesses

 

  • LinkedIn
  • Twitter
  • Facebook
  • Email
  • Print

Get in-depth healthcare technology analysis and commentary delivered straight to your email weekly

Reader Interactions

Primary Sidebar

Subscribe to HIT Consultant

Latest insightful articles delivered straight to your inbox weekly.

Submit a Tip or Pitch

Knowledge Hub

How AI Helps Health Systems Improve the Quality of Care for Patients with Chronic Conditions

How AI Helps Health Systems Improve the Quality of Care for Patients with Chronic Conditions

10 Critical KPIs Every Successful Healthcare Organization is Implementing10 Critical KPIs Every Successful Healthcare Organization is Implementing

Trending

Why The Evolution of Tech Will be Based on APIs

Why The Evolution of Tech Will be Based on APIs

Podimetrics CMO Talks Supporting Patients Living with SDoH Challenges

Podimetrics Director Talks Supporting Patients Living with SDoH Challenges

: Does Alzheimer’s Cure Matter if We Don't Fix the Economic Infrastructure of the Disease?

Does Alzheimer’s Cure Matter if We Don’t Fix the Economic Infrastructure of the Disease?

Recent Digital Health Partnerships

Roundups: 15 Recent Digital Health Strategic Partnerships

Recent Digital Health Executive Hires & Board Appointments

Digital Health Executive Hires: Practice Better Appoints CEO, HHAeXchange, Intelerad, Tegria, Others

M&A: Florence Acquires Virtual Care Solution Zipnosis

M&A: Florence Acquires Virtual Care Solution Zipnosis

Adopting Value-Based Care Models for Autism Care Is Imperative

Why Adopting Value-Based Care Models for Autism Care Is Imperative

UNC Health to Pilot Epic, Microsoft’s Generative AI Tool

UNC Health to Pilot Epic, Microsoft’s Generative AI Tool

Vanderbilt University Medical Center Taps Philips Reduce Carbon Footprint

Vanderbilt University Medical Center Taps Philips to Reduce Carbon Footprint

Denials Management Named Most Time-Consuming Task in RCM

Denials Management Named Most Time-Consuming Task in RCM

Secondary Sidebar

Footer

Company

  • About Us
  • Advertise with Us
  • Reprints and Permissions
  • 2023 Editorial Calendar
  • Submit An Op-Ed
  • Contact
  • Subscribe

Editorial Coverage

  • Opinion
  • Health IT
    • Care Coordination
    • EMR/EHR
    • Interoperability
    • Population Health Management
    • Revenue Cycle Management
  • Digital Health
    • Artificial Intelligence
    • Blockchain Tech
    • Precision Medicine
    • Telehealth
    • Wearables
  • Startups
  • Value-Based Care
    • Accountable Care
    • Medicare Advantage

Connect

Subscribe to HIT Consultant Media

Latest insightful articles delivered straight to your inbox weekly

Copyright © 2023. HIT Consultant Media. All Rights Reserved. Privacy Policy |