Re:Database of 9.3M Healthcare Patient Records Breached
by specialist on Thursday June 30, 2016 @04:47PM
(#12011530)
Worked in healthcare IT. Breaches are inevitable. Not "if", but "when".
The attack surface area is huge. My team created 5 regional healthcare exchanges. Hospitals, insurers, scripts, labs, etc. So many weak links in the chain.
So you'd think "encrypt" the data (ala translucent database designs). But you can't. Because we don't have unique identifiers for all persons, demographics must be stored in plaintext, so that medicals records can be matched across heterogenous systems.
The attack surface area is huge. My team created 5 regional healthcare exchanges. Hospitals, insurers, scripts, labs, etc. So many weak links in the chain.
So you'd think "encrypt" the data (ala translucent database designs). But you can't. Because we don't have unique identifiers for all persons, demographics must be stored in plaintext, so that medicals records can be matched across heterogenous systems.