CSID Study Finds Most Small Healthcare Facilities Unprepared for Data Breach

Webinar will discuss the rise of medical identity theft and best practices for consumers and facilities to protect against threats

AUSTIN, Texas--()--CSID, the global leader in identity protection and fraud detection technologies and solutions, recently conducted a survey to determine what small healthcare facilities are doing to protect patient data. The survey results found that while healthcare breaches are on the rise, most small facilities feel that their systems adequately limit the risk of a data breach despite one in three facilities spending less than 10 percent of their IT budget on protecting patient data. Most notably, the survey revealed:

  • Only 16.7 percent are worried about losing patient data in the event of a data breach, however, most small healthcare facilities are unprepared for a breach to occur. Less than a third (28.6 percent) have a crisis plan in place in the event of a breach.
  • Most healthcare facilities (81 percent) require strong passwords to access systems hosting sensitive information and control who has access to electronic health records, but only a third use multi-factor authentication and just one quarter vet and audit vendors that have access to patient data.
  • Half of employees who have access to electronic health records also have access to their personal email at work. This makes it easy for patient data to leave a facility without being tracked.
  • The vast majority (85 percent) of small healthcare facilities feel that their systems limit the risk of a data breach, but one third spend 10 percent or less of their IT budget on protecting patient data.

“With the rise of electronic medical records, one weak link can be devastating for the whole system. This survey shows that smaller healthcare facilities may not have adequate resources or know-how to protect patient data, potentially putting these entities and their patrons at risk,” said Joe Ross, president and co-founder of CSID. “It is going to be increasingly important for all healthcare facilities to proactively protect against medical data theft by implementing stronger security protocols and having a breach plan in place. Our goal here is to help them do this.”

CSID will host a webinar on October 21 at 12 p.m. CT to discuss the rising threat of medical identity theft and what consumers and businesses can do to better protect against these threats. Panelists will include Bryan Hjelm, Vice President of Product and Marketing at CSID, Ann Patterson, Senior Vice President and Program Director at the Medical Identity Fraud Alliance, and Marie-Helen Maras, computer forensics author and Professor at John Jay College of Criminal Justice. Visit CSID’s webinar registration page to sign up.

About CSID

CSID is the leading provider of global identity protection and fraud detection technologies for businesses, their employees, and consumers. With CSID’s enterprise-level solutions, businesses can take a proactive approach to protecting the identities of their consumers all around the world. CSID’s comprehensive identity protection products advance from credit monitoring to include a full suite of identity monitoring services; insurance and full-service restoration; and proactive breach mitigation and resolution. Join CSID on Facebook at https://www.facebook.com/CSID and on Twitter at @CSIdentity.

Contacts

INK for CSID
Helen Murphy, 512-922-3756
csid@ink-pr.com

Release Summary

CSID conducted a survey looking at how small healthcare organizations approach patient security. Here are the survey results.

Contacts

INK for CSID
Helen Murphy, 512-922-3756
csid@ink-pr.com