IT malpractice: Doc operates on server, costs hospitals $4.8M

[InfoSec News <alerts () infosecnews org>]

http://www.computerworld.com/s/article/9248205/IT_malpractice_Doc_operates_on_server_costs_hospitals_4.8M

By Jaikumar Vijayan
Computerworld
May 8, 2014

An inadvertent data leak that stemmed from a physician's attempt to 
reconfigure a server cost New York Presbyterian (NYP) Hospital and 
Columbia University (CU) Medical Center $4.8 million to settle with the 
U.S. Department of Health and Human Services (HHS).

The hospitals and HHS announced the voluntary settlement, which ends an 
inquiry into the incident, on Wednesday. New York Presbyterian will pay 
$3.3 million, while Columbia will pay $1.5 million to settle the 
complaint.

The hospitals also agreed to take "substantive" corrective action, 
including development of a new risk management plan and new policies and 
procedures for handling patient data. The HHS will also be provided with 
periodic progress updates under the agreement.

"Our cases against NYP and CU should remind health care organizations of 
the need to make data security central to how they manage their 
information systems," the statement said.

[...]



--
Subscribe to InfoSec News
http://www.infosecnews.org/subscribe-to-infosec-news/