Sunday , February 2 2025
HIPAA
Image: Sarah Stierch / Wikimedia Commons / CC BY 4.0

HIPAA to be updated with new cybersecurity regulations, White House

Proposed new cybersecurity rules for healthcare institutions will focus on how they protect user data under HIPAA, as stated by a White House official.

Anne Neuberger, deputy national security adviser for cyber and emerging technology, told “The security rule [under HIPAA] was first published in 2003 and it was last revised in 2013, so this is the first update to this 20-year rule in over a decade, and it will require entities who maintain healthcare data to do things like encrypt that data so if attacked, it cannot be leaked on the web and endanger individuals,”.

US scientists claim to replicate DeepSeek for $30 dubbed “TinyZero,”

Researchers at the University of California, Berkeley, claims they’ve managed to reproduce the core technology behind DeepSeek’s at a total...
Read More
US scientists claim to replicate DeepSeek for $30 dubbed “TinyZero,”

ChatGPT, DeepSeek, Qwen 2.5-VL Vulnerable to AI Jailbreaks

This week, multiple research teams showcased jailbreaks for popular AI models, including OpenAI's ChatGPT, DeepSeek, and Alibaba's Qwen. After its...
Read More
ChatGPT, DeepSeek, Qwen 2.5-VL Vulnerable to AI Jailbreaks

Paragon Attack WhatsApp With New Zero-Click Spyware

WhatsApp reveiled on Friday that a "zero-click" spyware attack, linked to the Israeli company Paragon, has targeted many users globally,...
Read More
Paragon Attack WhatsApp With New Zero-Click Spyware

Everything I Say Leaks,’ Zuckerberg Says in Leaked Meeting Audio

At an all-hands meeting at Meta on Thursday, Mark Zuckerberg did not mention the company's $25 million settlement with Donald...
Read More
Everything I Say Leaks,’ Zuckerberg Says in Leaked Meeting Audio

Indian tech giant Tata Tech hit by ransomware attack

Tata Technologies reported a ransomware incident affecting some IT services, but it did not disrupt client deliveries, according to a...
Read More
Indian tech giant Tata Tech hit by ransomware attack

Vulnarabilitties found in Cisco webex and VMware Aria operation

A serious cybersecurity flaw in Cisco Webex Chat has been discovered, allowing unauthorized attackers to access the chat histories of...
Read More
Vulnarabilitties found in Cisco webex and VMware Aria operation

Microsoft to boost M365 bounty program rewards Up to $27,000

Microsoft has announced a major expansion of its Microsoft 365 Bounty Program. The program now covers new Viva products for...
Read More
Microsoft to boost M365 bounty program rewards Up to $27,000

DeepSeek reveils over 1 million chat records; Italy Bans DeepSeek

Chinese AI startup DeepSeek has exposed two databases with sensitive user and operational information from its DeepSeek-R1 LLM model. Unsecured...
Read More
DeepSeek reveils over 1 million chat records; Italy Bans DeepSeek

Microsoft brings DeepSeeK to Azure AI Foundry and GitHub

Microsoft has added DeepSeek’s R1 AI model to its Azure AI Foundry platform and GitHub. This lets customers easily integrate...
Read More
Microsoft brings DeepSeeK to Azure AI Foundry and GitHub

Hackers leverage Google’s subdomains, phone number to attack victims

Scammers called a victim using Google's official support number and sent an email from an official subdomain. It's unclear how...
Read More
Hackers leverage Google’s subdomains, phone number to attack victims

The Department of Health and Human Services (HHS) will release a draft of the updated rules for public comment in the Federal Register, according to Neuberger.

Healthcare organizations must monitor their networks for threats and conduct compliance checks for new HIPAA rules, as stated by Neuberger. The White House estimates the implementation cost for the industry to be around $9 billion in the first year and $6 billion annually for the following four years.

“The cost of not acting is not only high, it also endangers critical infrastructure and patient safety, and it carries other harmful consequences,” she explained.

HIPAA, enacted in 1996, regulates the sharing of healthcare data among hospitals, insurers, and patients. Neuberger stated that the new rules would provide greater clarity and specificity regarding cybersecurity in HIPAA.

The White House has recently launched an initiative to address healthcare data breaches, which have surged over the past five years. Notably, 2024 experienced two major incidents: ransomware attacks on Change Healthcare and the Ascension hospital network.
Neuberger noted that the average cost of a healthcare breach in 2023 was $10.1 million, but companies like Ascension and Change Healthcare could face significant losses. UnitedHealth Group, the parent company of Change Healthcare, estimated that a February incident could cost over $850 million.

“Since 2019, large breaches caused by hacking and ransomware have increased 89% and 102% and I must say, in this job, one of the most concerning and really troubling things we deal with is hacking of hospitals, hacking of healthcare data,” she said.

“We see hospitals forced to operate manually. We see American sensitive healthcare data, sensitive mental health data, sensitive procedures, being leaked on the dark web with the opportunity to blackmail individuals with that.”

A year ago, HHS implemented cybersecurity rules for healthcare institutions involved in Medicare and Medicaid, linking federal payments to basic standards. They also suggested incorporating cybersecurity measures into HIPAA, including raising fines for HIPAA violations such as data breaches.

Congress supports the White House’s actions due to the ongoing hospital shutdowns from ransomware and the major impact of the Change Healthcare breach, which exposed the data of over 100 million people.

In February, HHS released a 122-page guide informing HIPAA-covered entities to start conducting cybersecurity risk assessments and management.

Check Also

AI foundry

Microsoft brings DeepSeeK to Azure AI Foundry and GitHub

Microsoft has added DeepSeek’s R1 AI model to its Azure AI Foundry platform and GitHub. …

Leave a Reply

Your email address will not be published. Required fields are marked *