Privacy & Security

The World Health Organization on Friday issued a warning about counterfeit and stolen COVID-19 vaccines being sold on the dark web.   Fake vaccination certificates are also being sold, as well as fake negative tests, aimed at those traveling abroad.   The WHO is "aware of vaccines being diverted and reintroduced into the supply chain, with no guarantee that [the] cold chain has been maintained," said WHO Director-General Tedros Adhanom Ghebreyesus during a press conference.   WHY IT MATTERS   Spiking demand for the COVID-19 vaccine has met inconsistent availability, with scams emerging as a seemingly inevitable result.     The WHO said several ministries of health and regulatory agencies around the world had received suspicious offers to supply vaccines, along with reports of "criminal groups" reusing empty vaccine vials. "We urge the secure disposal or destruction of used and empty vaccine vials to prevent them from being reused by criminal groups," said Ghebreyesus. According to the BBC, doses of AstraZeneca, Sputnik, Sinipharm and Johnson & Johnson vaccines are being offered for prices between $500 and $750 on the dark web.   Researchers at the cybersecurity company Check Point say they've seen a tripling in vaccine advertisements since January, with some sellers offering next-day delivery.   Other forums are advertising fake negative COVID-19 tests and forged vaccination cards for $150.   The WHO on Friday also alerted the public to a falsified vaccine detected in Mexico in February, which had been administered to patients outside of authorized vaccination programs.   "Falsified COVID-19 vaccines pose a serious risk to global public health and place an additional burden on vulnerable populations and health systems. It is important to identify and remove these from circulation," said the agency in a statement.   THE LARGER TREND Experts have warned about the security risks engendered by the COVID-19 vaccine rollout, including issues with the distribution pipeline and increased phishing dangers.   Last month, Invistics founder and CEO Tom Knight told Healthcare IT News that many instances of drug diversion are never detected, with a lack of oversight contributing to ease of potential theft.   "The fragmented controls are definitely a challenge and will lead to more diversion," said Knight.   ON THE RECORD   "We urge all people not to buy vaccines outside government-run vaccination programs," said Ghebreyesus. "Any vaccine outside these programs may be substandard or falsified, with the potential to cause serious harm."   Kat Jercich is senior editor of Healthcare IT News. Twitter: @kjercich Email: kjercich@himss.org Healthcare IT News is a HIMSS Media publication.

The CISO at vendor FNTS goes in-depth on where cloud technology works best, and talks cybersecurity measures to address the HIPAA Safe Harbor Law.

In the debut episode of HIT Cybersecurity, Kelvin Coleman, executive director of the National Cyber Security Alliance, describes the current threat landscape – and offers tips for safeguarding a target-rich environment during the pandemic.

Gerry Blass, CEO of ComplyAssistant, provider of an integrated approach to cybersecurity and compliance for hospitals and health systems, discusses the ramifications of the HICP law and best practices for healthcare organizations to comply.

Atascadero State Hospital reported this week that a state employee had improperly accessed more than 2,000 records, including information necessary for tracking COVID-19.

As the attack surface continues to expand as digital transformation advances, Troy Ament, field CISO of healthcare/pharma at Fortinet, explains why it is "super critical" that security is embedded into that transformation and not just bolted on.

An eye care practice reported that an unauthorized individual had gained access to an employee's work email in January.

In 2020, a record number of 1,268 Microsoft vulnerabilities were discovered, a 48% increase year over year, a BeyondTrust report finds. Its CISO sits for an interview to dig deep into the findings.

Passengers travelling to Martinique and Guadeloupe will use smartphone app to prove COVID-safe status.

The Information Commissioner's Office is investigating claims that staff used personal email addresses to send health data.