Smart pens and IV transfusion pumps are showing hacking vulnerabilities according to a study posted by HIPPA in 2017. The healthcare industry is no stranger to hacking and is one of the top industries on the hacker hit list. Companies always seem to be steps behind the bad guys and healthcare is no different.
Unauthorized access to medical devices is of great concern to patients fearing their personal information may be compromised by a simple prescription…or worse. While the risk is likely low, at any moment, the IV pump at their bedside could provide lethal doses of what is already coursing through their veins.
Digital smart pens, for example, are used by doctors to write medication prescriptions; which are then transmitted directly to pharmacies to fill. According to HIPPA’s own website, Spirent Security Labs researcher Saurabh Harit was able to find patient contact information as well as clinical information and medical records from smart pens. Harit also found that for a $7 part, communication with IV pumps was achieved, allowing access and configuration to the device connection point. While this can certainly prove advantageous for remote configuration by healthcare providers or patients, it can also provide some opportunities for those who may really want to do something heinous.
In 2017, the Healthcare Information and Management Systems Society (HIMSS) did a Cybersecurity Survey of healthcare organizations around the U.S. According to the survey authors “…senior information security leaders know that cyber-attacks on medical devices may lead to serious consequences, especially if the medical device is life-sustaining or life-saving…” It goes on to say “A hacked insulin pump may deliver a fatal bolus of insulin to a patient. A ‘connected’ pacemaker may deliver a fatal shock to a patient.” Healthcare officials and medical device manufacturers are aware of the vulnerabilities to their systems and products and are working to solve the issues.
In the meantime, as a patient, consider asking your doctor for an old-fashioned paper prescription, rather than having him or her send it with a smart pen. Don’t be afraid to ask your healthcare provider about the cyber devices they use and prescribe for you. Do some research on them and be aware of what vulnerabilities they may have and work with your providers to determine the best fit for you and your lifestyle.
As a healthcare provider, be aware of the cyber risks the products carry for your patients. In some cases, it may be a better solution to stick with the old tried and true for a while longer.
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.
