Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hospitals are a weak spot in U.S. cybersecurity

axios.com

Post reply on HN
Print view View original

91–100 of 166 posts

Re: Hospitals are a weak spot in U.S. cybersecurity

#91

Post by HeWhoLurksLate »

AzzieElbab wrote: post #56
rubatuga wrote: post #52

Earlier quoted context omitted.

People need to stop hating on fax. Hospitals still use fax because it is a much more punishable crime to tap phone lines which requires physical access, as opposed to a server that could be infected from a hacker halfway across the world.

it has nothing to do with security. Nurses like fax machines because it gets them a break. I've seen them print e-refferals just to fax to each other.

That's not even the same thing.

People mess around with just about anything they can get their hands on- so what if the nurses send messages to each other and have fun? I'd be willing to give the people who take care of me a ream of paper if it meant they were in a good mood.

Re: Hospitals are a weak spot in U.S. cybersecurity

#92

Post by qrbLPHiKpiux »

EuphoricEmu wrote: post #51
burnte wrote: post #47

Healthcare CIO here. This is true. Healthcare is still using paper fax. It has a 30 year old data interchange format that no one really supports because it's more profitable to lock in customers to your EMR. Healthcare is HORRIBLE about upgrading anything, at changing processes, and technological progress in general. Healthcare is VERY backwards from a tech standpoint. Another problem is that EVERYTHING is custom, we…

Could not agree more! As someone who works as a contractor for two relatively large RHIOs I was absolutely dumbfounded by how contradictory everything is when I first started. I’m in a unique position where I get to interact with dozens of EMR/EHR vendors. They’re all terrible.

Cerner? Epic? Suck and suck!

Re: Hospitals are a weak spot in U.S. cybersecurity

#93

Post by swader999 »

heartbreak wrote: post #69
swader999 wrote: post #64

So are vet hospitals. At this very moment there's a chance you'll walk into one that has fallen back to paper records and billing due to a continent wide ransom ware attack. https://www.reddit.com/r/msp/comments/dnd7aq/ransomware_atta... From that thread: Avimark is an old style load the EXE from a share program with a flat file structure for the data. Most clinics are not in a domain, just workgroup, and the share i…

It's worse than that thread reveals. NVA was hit by a ransomware attack in May. They're now in a second attack that began in late October (ongoing). The latest one was described by CIO Joe Leggio as a "coordinated and sophisticated" attack in an internal email. He said it was designed to breach the NVA system specifically and that the attackers had three separate entry points. Only this week did NVA deploy endpoint s…

This sounds exactly correct unfortunately. Also taking down clinics in Canada.

Re: Hospitals are a weak spot in U.S. cybersecurity

#95

Post by Forge36 »

burnte wrote: post #47

Healthcare CIO here. This is true. Healthcare is still using paper fax. It has a 30 year old data interchange format that no one really supports because it's more profitable to lock in customers to your EMR. Healthcare is HORRIBLE about upgrading anything, at changing processes, and technological progress in general. Healthcare is VERY backwards from a tech standpoint. Another problem is that EVERYTHING is custom, we…

I've never understood hating on mumps. 66 vs 72 (c language) It's just shitting on the language for being old without a way to impact it.

Re: Hospitals are a weak spot in U.S. cybersecurity

#96

Post by Forge36 »

VectorLock wrote: post #66
burnte wrote: post #47

Healthcare CIO here. This is true. Healthcare is still using paper fax. It has a 30 year old data interchange format that no one really supports because it's more profitable to lock in customers to your EMR. Healthcare is HORRIBLE about upgrading anything, at changing processes, and technological progress in general. Healthcare is VERY backwards from a tech standpoint. Another problem is that EVERYTHING is custom, we…

Does Epic use MUMPS? I know a lot of professional nurses and the rancor around Epic is off the charts.

It does. The language predates no-sql though it hasn't been kept as up to date as C. It's a database language.

Re: Hospitals are a weak spot in U.S. cybersecurity

#97

Post by Forge36 »

Sniffnoy wrote: post #79
VectorLock wrote: post #66

Earlier quoted context omitted.

Does Epic use MUMPS? I know a lot of professional nurses and the rancor around Epic is off the charts.

Epic uses MUMPS, but a nurse would not typically be interacting with that side of it...

As it should be. Why should companies brag about using SQL or Hadoop?

Re: Hospitals are a weak spot in U.S. cybersecurity

#98

Post by imglorp »

heartbreak wrote: post #69
swader999 wrote: post #64

So are vet hospitals. At this very moment there's a chance you'll walk into one that has fallen back to paper records and billing due to a continent wide ransom ware attack. https://www.reddit.com/r/msp/comments/dnd7aq/ransomware_atta... From that thread: Avimark is an old style load the EXE from a share program with a flat file structure for the data. Most clinics are not in a domain, just workgroup, and the share i…

It's worse than that thread reveals. NVA was hit by a ransomware attack in May. They're now in a second attack that began in late October (ongoing). The latest one was described by CIO Joe Leggio as a "coordinated and sophisticated" attack in an internal email. He said it was designed to breach the NVA system specifically and that the attackers had three separate entry points. Only this week did NVA deploy endpoint s…

This sounds ideal for a SaaS. Why is each practice messing around with an IT dept and SQL and DR when it could be hosted and managed at low cost for all them at once?

Re: Hospitals are a weak spot in U.S. cybersecurity

#99

Post by heartbreak »

imglorp wrote: post #98
heartbreak wrote: post #69

Earlier quoted context omitted.

It's worse than that thread reveals. NVA was hit by a ransomware attack in May. They're now in a second attack that began in late October (ongoing). The latest one was described by CIO Joe Leggio as a "coordinated and sophisticated" attack in an internal email. He said it was designed to breach the NVA system specifically and that the attackers had three separate entry points. Only this week did NVA deploy endpoint s…

This sounds ideal for a SaaS. Why is each practice messing around with an IT dept and SQL and DR when it could be hosted and managed at low cost for all them at once?

The industry has been really slow to move to SaaS. Avimark's primary competitor has a strong SaaS offering with Idexx Neo [0], but NVA requires the practices they buy to switch to Avimark.

[0] https://www.idexx.com/en/veterinary/software-services/neo/

Re: Hospitals are a weak spot in U.S. cybersecurity

#100

Post by bsder »

burnte wrote: post #47

Healthcare CIO here. This is true. Healthcare is still using paper fax. It has a 30 year old data interchange format that no one really supports because it's more profitable to lock in customers to your EMR. Healthcare is HORRIBLE about upgrading anything, at changing processes, and technological progress in general. Healthcare is VERY backwards from a tech standpoint. Another problem is that EVERYTHING is custom, we…

> Healthcare is VERY backwards from a tech standpoint.

This strikes me as the SAP problem.

Everybody hated their big company's system. Until SAP came along and somehow made it orders of magnitude worse.

It's what happens when purchasing decisions are driven from the top. Sadly, in healthcare, given all the regulations, I'm not sure there is another option.

Post reply on HN