On July 23, 2014, the Massachusetts Attorney General announced a consent judgment with an out-of-state Rhode Island hospital, Women & Infants Hospital of Rhode Island (“WIH” or the “Hospital”), resolving a lawsuit against WIH for violations of federal and state information security and privacy laws involving the loss of over 12,000 Massachusetts residents’ sensitive patient health records.
This week, the National Institute of Standards and Technology (NIST) convened the first face-to-face meeting of the cyber-physical systems public working group (CPS PWG) to develop and implement a new cybersecurity framework dedicated to cyber-physical systems (CPS), also known as the “Internet of Things.”
Seemingly every day, new types of wearable devices are popping up on the market. Google Glass, Samsung’s Gear, Fitbit (a fitness and activity tracker), Pulse (a fitness tracker that measures heart rate and blood oxygen), and Narrative (a wearable, automatic camera) are just a few of the more popular “wearables” currently on the market, not to mention Apple’s “iWatch,” rumored to be released later this year.
The increasing prevalence of mobile technology in the healthcare sector continues to create compliance concerns for physician practices and other health care entities.
Despite the fact that companies are continuing to increase spending on cybersecurity initiatives, data breachs continue to occur.
As previously reported, in a March 2014 filing titled H.W. v. Sterling High School District, a New Jersey high school student filed suit claiming school officials had violated her constitutional rights when they punished her for content she posted on Twitter which criticized Sterling High School’s principal.
On July 31, a U.S. District Court judge ruled from the bench that Microsoft could be forced to turn over customer emails in the context of a law enforcement investigation even though those emails were stored on servers located in Ireland.
Last week it was reported that a small group of Russian computer hackers illegally obtained an unprecedented quantity of internet credentials, including 1.2 billion username and password combinations, and over 500 million unique email addresses.