[{"innerBlocks":[],"name":"core\/freeform","postId":430,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"Data breaches frequently occur in healthcare, and when these breaches become public, there\u2019s always a tally on the number of affected patients.In a new report published in the Annals of Internal Medicine, John Jiang of Michigan State University, and Ge Bai, from the Johns Hopkins Bloomberg School of Public Health, say follow the compromised data, not the patients. That\u2019s because more than 70 percent of breached information is ripe for stealing to commit identity or financial fraud.\u201cThe reporting requirements, academic research and public attention regarding consequences of protected health information breaches are primarily focused on the number of affected patients rather than the types of compromised PHI, limiting the potential to manage the risk for breach effectively,\u201d the researchers contend.

Jiang and Bai then classified compromised PHI into three types. The first is demographic information, including names, e-mail addresses, phone numbers and other personal identifiers, as well as Social Security numbers, driver\u2019s license numbers and dates of birth\u2014these are sensitive information that could be exploited for identity fraud.The second type of PHI includes service or financial information, service dates, billing amounts, payment information, payment cards and banking accounts\u2014these types PHI also are vulnerable to being compromised.The third type of PHI is all personal medical information, comprising medical data, substance abuse, HIV, sexually transmitted diseases, mental health and other diseases or diagnoses. This data has substantial implications for clinical privacy as one breach could compromise several types of protected health information, Jiang and Bai explain. \u201cAll 1461 breaches used in the research involved at least one piece of demographic information. In particular, 964 breaches (66 percent) affecting 150 million patients (89 percent), comprised sensitive demographics such as Social Security number, driver license number and dates of birth.\u201d\u201cPolicy makers may consider requiring entities to provide standardized documentation of the types of compromised PHI, in addition to persons affected, when reporting breaches,\u201d Jiang and Bai conclude. \u201cSuch information will facilitate the analysis and understanding of breaches and their consequences, and the development and adoption of PHI security practices.\u201d","saveContent":"Data breaches frequently occur in healthcare, and when these breaches become public, there\u2019s always a tally on the number of affected patients.In a new report published in the Annals of Internal Medicine, John Jiang of Michigan State University, and Ge Bai, from the Johns Hopkins Bloomberg School of Public Health, say follow the compromised data, not the patients. That\u2019s because more than 70 percent of breached information is ripe for stealing to commit identity or financial fraud.\u201cThe reporting requirements, academic research and public attention regarding consequences of protected health information breaches are primarily focused on the number of affected patients rather than the types of compromised PHI, limiting the potential to manage the risk for breach effectively,\u201d the researchers contend.

Jiang and Bai then classified compromised PHI into three types. The first is demographic information, including names, e-mail addresses, phone numbers and other personal identifiers, as well as Social Security numbers, driver\u2019s license numbers and dates of birth\u2014these are sensitive information that could be exploited for identity fraud.The second type of PHI includes service or financial information, service dates, billing amounts, payment information, payment cards and banking accounts\u2014these types PHI also are vulnerable to being compromised.The third type of PHI is all personal medical information, comprising medical data, substance abuse, HIV, sexually transmitted diseases, mental health and other diseases or diagnoses. This data has substantial implications for clinical privacy as one breach could compromise several types of protected health information, Jiang and Bai explain. \u201cAll 1461 breaches used in the research involved at least one piece of demographic information. In particular, 964 breaches (66 percent) affecting 150 million patients (89 percent), comprised sensitive demographics such as Social Security number, driver license number and dates of birth.\u201d\u201cPolicy makers may consider requiring entities to provide standardized documentation of the types of compromised PHI, in addition to persons affected, when reporting breaches,\u201d Jiang and Bai conclude. \u201cSuch information will facilitate the analysis and understanding of breaches and their consequences, and the development and adoption of PHI security practices.\u201d","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Totality of data compromised shows the true impact of a breach

More for you