{"id":1914,"date":"2014-02-12T11:40:39","date_gmt":"2014-02-12T17:40:39","guid":{"rendered":"http:\/\/kbicblog.com\/blog\/healthcare-finance\/?p=1914"},"modified":"2016-09-15T13:11:20","modified_gmt":"2016-09-15T18:11:20","slug":"why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower","status":"publish","type":"post","link":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/","title":{"rendered":"Why Healthcare Should Be Worried About the Target Cyber Attacks – Joe Flower"},"content":{"rendered":"
\n

Why Healthcare Should Be Worried About the Target Cyber Attacks<\/a><\/h2>\n<\/div>\n
\n

By\u00a0JOE FLOWER<\/p>\n

\"\"<\/a>If you are a CEO or COO of a health care organization, and your IT people have been trying to get your attention, it\u2019s time to have a serious sit-down with them.<\/p>\n

If they haven\u2019t been trying to get your attention, it\u2019s time to have an more serious sit-down with them, complete with charts and graphs and arrows on fip charts.<\/p>\n

Here\u2019s why:\u00a0Remember in November it was revealed that the Target retail chain\u2019s computer systems were compromised? Some 70 million names, home addresses and phone numbers were stolen (pretty good raw material for identity theft) and 40 million credit card numbers.<\/p>\n

It has turned out since then that some two dozen other companies, including Neiman-Marcus, the Michael\u2019s arts-and-crafts chain and the White Lodging Services hotel management firm, have been hacked in similar ways, with the attackers software sitting in the companies\u2019 servers, credit card machines and cash registers often for months before they were detected, sucking down every transaction, every bit of data moved about.<\/p>\n

Hey wait, you say, I have every confidence in our computer security. Why we passed a security audit just recently.<\/p>\n

Heh. So did Target \u2014 just before they discovered the break-in. They got a clean bill of health, and the auditors failed to find the malware installed on every server, every credit card terminal, every cash register.<\/p>\n

Why? Because the attackers have gotten way more sophisticated, and they used new techniques and methods of entry. You can now buy ready-made hacking software designed to do this on the Internet for less than $1000.<\/p>\n

Here\u2019s the kicker:\u00a0Target has security guards at the doors, it has those beeper tags on small high-value items so you can\u2019t sneak them out without paying for them, it has burglar alarms \u2014 but the perps in the biggest heist in the company\u2019s history entered through the thermostat.<\/p>\n

Got that? The thermostat.<\/p>\n

Big-box stores have pretty sophisticated HVAC. Hospitals have much more sophisticated HVAC systems. Big-box stores typically outsource the management of such systems to outside firms. Most hospitals do the same. The outside contractor monitors and controls the HVAC over the Internet.<\/p>\n

All the sensors, thermostats, switches, control valves and such report to software on the store\u2019s servers. To allow this, the outside contractor is given password-controlled access to the store\u2019s computer system.<\/p>\n

How many of your systems, such as HVAC, water\/sewage, security, and so on, are connected to the Internet, so that they can be remotely monitored? If you\u2019re doing it right, there are a lot of them, and many are outsourced. Think about that, then read these two paragraphs from a\u00a0New York Times<\/em>\u00a0article the other day:<\/p>\n

\u201cRemote access to these systems is really common and integrators are almost always on the corporate network,\u201d said Billy Rios, director of threat intelligence at Qualys, a cloud security firm. Mr. Rios said that the security at such companies tended to be poor and that vendors often used the same password across multiple customers.<\/p>\n

Over the last two years, Mr. Rios and Terry McCorkle, also of Qualys, said that they found 55,000 HVAC systems connected to the Internet. In most cases, they said, the systems contained basic security flaws that would allow hackers a way into companies\u2019 corporate networks, or the companies installing and monitoring these systems reused the same remote access passwords across multiple clients.<\/p>\n

\u2014\u00a0\u00a0\u00a0\u00a0 Nicole Perlroth, \u201cHeat System Called Door to Target for Hackers,\u201d NY Times, Feb. 5, 2014<\/p><\/blockquote>\n

If that didn\u2019t make your blood feel like it\u2019s been run through a chiller, it ought to. How certain are you that your patient and payment information is separated by an impenetrable wall from your plant-monitoring information? What about your system makes it invulnerable to this style of attack? How is the data in your system encrypted against anyone who might penetrate the firewall?<\/p>\n

Hey wait, you say, we\u2019re not a high-value target. We don\u2019t have millions of credit card numbers. And why would anyone want to steal millions of health plan account numbers? Or even millions of medical histories?<\/p>\n

Maybe you\u2019re right. But think about this: We are in the middle of a massive move not only to computerize the entire patent experience, but to pull together all the different pieces into comprehensive records that include enormous amounts of personal information, from address and credit card information to sexual health, addiction and other embarrassing private stuff.<\/p>\n

Keep in mind that the ACA and other recent changes will greatly ramp up the amount of substance abuse and other behavioral health issues that are covered as part of the mainstream record.<\/p>\n

Now picture a black hat advertising on hacking forums: \u201cWe can get you the medical records of anyone \u2014 any celebrity, wealthy person, or blackmail target.\u201d And they can say that because they have penetrated the nets of information that flow between hospitals and payers, as well as the internal systems of hospitals and clinics.<\/p>\n

But it\u2019s even more important than that. Health systems, clinics, and hospitals depend on their customers having a feeling of trust and safety in bringing their problems and medical details to you. If people feel that you\u2019re a sieve, they will take their problems elsewhere. You seriously do not want your institution named in a headline about a data breach.<\/p>\n

So CEOs, COOs: Time for a good long detailed talk with your IT people.<\/p>\n

With nearly 30 years\u2019 experience, Joe Flower has emerged as a premier observer on the deep forces changing healthcare in the United States and around the world. As a healthcare speaker, writer, and consultant, he has explored the future of healthcare with clients ranging from the World Health Organization, the Global Business Network, and the U.K. National Health Service, to the majority of state hospital associations in the U.S.<\/em><\/p>\n

You can find more of Joe\u2019s work at his website,\u00a0<\/em>imaginewhatif<\/em><\/a>.<\/em><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Why Healthcare Should Be Worried About the Target Cyber Attacks By\u00a0JOE FLOWER If you are a CEO or COO of a health care organization, and your IT people have been trying to get your attention, it\u2019s time to have a serious sit-down with them. If they haven\u2019t been trying to …<\/p>\n","protected":false},"author":26,"featured_media":1915,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[308],"tags":[83,251,176,84,249,250],"class_list":["post-1914","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-news","tag-healthcare-finance","tag-heatlhcare","tag-kaye-bassman","tag-kbic","tag-target-cyber-attacks","tag-the-health-care-blog","column","threecol","has-thumbnail"],"yoast_head":"\nWhy Healthcare Should Be Worried About the Target Cyber Attacks<\/title>\n<meta name=\"description\" content=\"Why Healthcare Should Be Worried About the Target Cyber Attacks by Joe Flower, The Health Care Blog.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Why Healthcare Should Be Worried About the Target Cyber Attacks\" \/>\n<meta name=\"twitter:description\" content=\"Why Healthcare Should Be Worried About the Target Cyber Attacks by Joe Flower, The Health Care Blog.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/kbicblog.com\/healthcare-finance\/files\/2014\/02\/TARGET.png\" \/>\n<meta name=\"twitter:creator\" content=\"@HCFinanceKBIC\" \/>\n<meta name=\"twitter:site\" content=\"@HCFinanceKBIC\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"tbasped\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/\"},\"author\":{\"name\":\"tbasped\",\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/#\\\/schema\\\/person\\\/001938d7be7799c9b9c4fb01777f5d73\"},\"headline\":\"Why Healthcare Should Be Worried About the Target Cyber Attacks – Joe Flower\",\"datePublished\":\"2014-02-12T17:40:39+00:00\",\"dateModified\":\"2016-09-15T18:11:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/\"},\"wordCount\":1010,\"image\":{\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/files\\\/2014\\\/02\\\/TARGET.png\",\"keywords\":[\"Healthcare finance\",\"Heatlhcare\",\"Kaye Bassman\",\"KBIC\",\"Target Cyber Attacks\",\"The Health Care Blog\"],\"articleSection\":[\"Industry News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/\",\"url\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/\",\"name\":\"Why Healthcare Should Be Worried About the Target Cyber Attacks\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/files\\\/2014\\\/02\\\/TARGET.png\",\"datePublished\":\"2014-02-12T17:40:39+00:00\",\"dateModified\":\"2016-09-15T18:11:20+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/#\\\/schema\\\/person\\\/001938d7be7799c9b9c4fb01777f5d73\"},\"description\":\"Why Healthcare Should Be Worried About the Target Cyber Attacks by Joe Flower, The Health Care Blog.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/files\\\/2014\\\/02\\\/TARGET.png\",\"contentUrl\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/files\\\/2014\\\/02\\\/TARGET.png\",\"width\":669,\"height\":694},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/industry-news\\\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Industry News\",\"item\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/category\\\/industry-news\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Why Healthcare Should Be Worried About the Target Cyber Attacks – Joe Flower\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/#website\",\"url\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/\",\"name\":\"Healthcare Finance Recruiting\",\"description\":\"Your Healthcare Finance Search Leader\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/#\\\/schema\\\/person\\\/001938d7be7799c9b9c4fb01777f5d73\",\"name\":\"tbasped\",\"url\":\"https:\\\/\\\/kbicblog.com\\\/healthcare-finance\\\/author\\\/tbasped\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Why Healthcare Should Be Worried About the Target Cyber Attacks","description":"Why Healthcare Should Be Worried About the Target Cyber Attacks by Joe Flower, The Health Care Blog.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/","twitter_card":"summary_large_image","twitter_title":"Why Healthcare Should Be Worried About the Target Cyber Attacks","twitter_description":"Why Healthcare Should Be Worried About the Target Cyber Attacks by Joe Flower, The Health Care Blog.","twitter_image":"https:\/\/kbicblog.com\/healthcare-finance\/files\/2014\/02\/TARGET.png","twitter_creator":"@HCFinanceKBIC","twitter_site":"@HCFinanceKBIC","twitter_misc":{"Written by":"tbasped","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/#article","isPartOf":{"@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/"},"author":{"name":"tbasped","@id":"https:\/\/kbicblog.com\/healthcare-finance\/#\/schema\/person\/001938d7be7799c9b9c4fb01777f5d73"},"headline":"Why Healthcare Should Be Worried About the Target Cyber Attacks – Joe Flower","datePublished":"2014-02-12T17:40:39+00:00","dateModified":"2016-09-15T18:11:20+00:00","mainEntityOfPage":{"@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/"},"wordCount":1010,"image":{"@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/#primaryimage"},"thumbnailUrl":"https:\/\/kbicblog.com\/healthcare-finance\/files\/2014\/02\/TARGET.png","keywords":["Healthcare finance","Heatlhcare","Kaye Bassman","KBIC","Target Cyber Attacks","The Health Care Blog"],"articleSection":["Industry News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/","url":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/","name":"Why Healthcare Should Be Worried About the Target Cyber Attacks","isPartOf":{"@id":"https:\/\/kbicblog.com\/healthcare-finance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/#primaryimage"},"image":{"@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/#primaryimage"},"thumbnailUrl":"https:\/\/kbicblog.com\/healthcare-finance\/files\/2014\/02\/TARGET.png","datePublished":"2014-02-12T17:40:39+00:00","dateModified":"2016-09-15T18:11:20+00:00","author":{"@id":"https:\/\/kbicblog.com\/healthcare-finance\/#\/schema\/person\/001938d7be7799c9b9c4fb01777f5d73"},"description":"Why Healthcare Should Be Worried About the Target Cyber Attacks by Joe Flower, The Health Care Blog.","breadcrumb":{"@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/#primaryimage","url":"https:\/\/kbicblog.com\/healthcare-finance\/files\/2014\/02\/TARGET.png","contentUrl":"https:\/\/kbicblog.com\/healthcare-finance\/files\/2014\/02\/TARGET.png","width":669,"height":694},{"@type":"BreadcrumbList","@id":"https:\/\/kbicblog.com\/healthcare-finance\/industry-news\/why-healthcare-should-be-worried-about-the-target-cyber-attacks-joe-flower\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kbicblog.com\/healthcare-finance\/"},{"@type":"ListItem","position":2,"name":"Industry News","item":"https:\/\/kbicblog.com\/healthcare-finance\/category\/industry-news\/"},{"@type":"ListItem","position":3,"name":"Why Healthcare Should Be Worried About the Target Cyber Attacks – Joe Flower"}]},{"@type":"WebSite","@id":"https:\/\/kbicblog.com\/healthcare-finance\/#website","url":"https:\/\/kbicblog.com\/healthcare-finance\/","name":"Healthcare Finance Recruiting","description":"Your Healthcare Finance Search Leader","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kbicblog.com\/healthcare-finance\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kbicblog.com\/healthcare-finance\/#\/schema\/person\/001938d7be7799c9b9c4fb01777f5d73","name":"tbasped","url":"https:\/\/kbicblog.com\/healthcare-finance\/author\/tbasped\/"}]}},"_links":{"self":[{"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/posts\/1914","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/comments?post=1914"}],"version-history":[{"count":0,"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/posts\/1914\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/media\/1915"}],"wp:attachment":[{"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/media?parent=1914"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/categories?post=1914"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kbicblog.com\/healthcare-finance\/wp-json\/wp\/v2\/tags?post=1914"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}