Tag Archive for: EHR

EHR Vendors’ Disclosures Are Latest Security Risk Reminders

/in


Breach Notification
,
Critical Infrastructure Security
,
HIPAA/HITECH

QRS Inc. Reports Patient Portal Hack; Philips Reveals TASY EMR Security Flaws

Marianne Kolbasuk McGee (HealthInfoSec) •
November 5, 2021    

EHR Vendors' Disclosures Are Latest Security Risk Reminders

A recent large hacking incident and a separate vulnerability disclosure involving two different vendors’ products related to electronic health records serve as the latest reminders of the potential risks these systems can pose to patients’ protected health information.

See Also: Finding New Ways to Disrupt Ransomware Operations

Tennessee-based QRS Inc., vendor of the Paradigm practice management and electronic health records systems, on Oct. 22 reported to the Department of Health and Human Services a hacking IT incident involving a patient portal server affecting nearly 320,000 individuals’ PHI.

Meanwhile, in a separate development, medical technology vendor Philips Healthcare and the Cybersecurity and Infrastructure Security Agency on Thursday each issued security advisories concerning two SQL vulnerabilities identified in the Philips TASY Electronic Medical Record HTML5 system, versions 3.06.1803 and prior.


The Philips EMR vulnerabilities, if exploited, pose risks to patient data confidentiality, the advisories say.

The two situations “are another reminder of how vulnerable the entire healthcare system is from the standpoint of cybersecurity,” says George Jackson, a senior principal consultant at privacy and security consultancy Clearwater.

“One is an example of a serious vulnerability requiring a…

Source…

Vocera Edge maximizes EHR investments and empowers mobile clinicians

/in


Vocera introduced its new cloud-based clinical communication and collaboration (CC&C) solution for smartphones called Vocera Edge.

Designed for the cloud, Vocera Edge enables healthcare systems to get the most out of their electronic health record (EHR) investments, while empowering nurses, physicians, and other care team members by delivering meaningful information at the point of care. The software as a service (SaaS) solution enables Vocera to extend its market reach, broaden physician use cases and adoption, and deepen EHR integrations to support patient-centric workflows.

“Vocera Edge is the ideal CC&C solution for any clinic, hospital, or health system making investments in smartphone-centric communication to complement their EHR system,” said Brent Lang, Chairman and CEO of Vocera. “Our goal is to offer customers choices for how they purchase and deploy our solutions. This secure and robust solution is a natural extension of our strategic vision and is particularly well suited to match the speed and scale of each organization’s needs to improve patient care, safety and experience.”

“Two-way communication between Vocera Edge and the hospital’s EHR makes it seamless for clinicians to complete documentation and manage all patient-centric communication right from their smartphones,” said Steve Shirley, Vice President of Information Technology and Chief Information Officer at Parkview Medical Center.

Interoperability between Vocera Edge and EHRs helps clinicians easily close the loop on patient-centered workflows, including positive patient identification, specimen collection, fall risk assessments, digital checklists, and more. Secure messages, voice calls, alerts and alarm notifications are consolidated with contextual, task-based information and presented by Vocera Edge to help mobile clinicians make real-time decisions and provide safe, efficient, and effective care.

Source…