Marianne Kolbasuk McGee

Executive Editor, HealthcareInfoSecurity, ISMG

McGee is executive editor of Information Security Media Group's HealthcareInfoSecurity.com media site. She has about 30 years of IT journalism experience, with a focus on healthcare information technology issues for more than 15 years. Before joining ISMG in 2012, she was a reporter at InformationWeek magazine and news site and played a lead role in the launch of InformationWeek's healthcare IT media site.

Ransomware Attack Leads to Discovery of Lots More Malware

Marianne Kolbasuk McGee • July 27, 2018

A family care clinic in Missouri says those investigating and mitigating a recent ransomware attack discovered that its systems were "loaded with a variety of malware programs." Experts say such post-breach discoveries are common.

Lawsuit: HHS' Patient Record Access Regulations 'Unlawful'

Marianne Kolbasuk McGee • January 12, 2018

A lawsuit alleging that federal regulations "unlawfully" restrict fees healthcare entities can charge for providing patients with copies of their health records shines a spotlight of confusion and obstacle around patients' "right to access" under HIPAA.

Insurer Slapped with $2.2 Million HIPAA Settlement

Marianne Kolbasuk McGee • January 18, 2017

In its second HIPAA enforcement action for 2017, HHS has slapped an insurer with a $2.2 million settlement in the wake of a relatively small breach, citing the company's lack of timely corrective action.

When Can Patient Information Be Shared With Loved Ones?

Marianne Kolbasuk McGee • January 13, 2017

HHS has issued new health data privacy guidance and announced a contest to create an online "model privacy notice generator." Plus, it's issued a reminder about the importance of reviewing and securing audit logs to help prevent and detect breaches.

Why a HIPAA Security Analysis Is Not Enough

Marianne Kolbasuk McGee • January 12, 2017

Although HIPAA requires healthcare organizations to conduct a periodic security risk analysis focused on systems containing PHI, larger entities should also perform more comprehensive security self-assessments, advises CISO David Loewy of SUNY Downstate Medical Center, who explains his approach.

Doctor Won't Be Fined in HIPAA Case Involving Campaign

Marianne Kolbasuk McGee • January 11, 2017

A physician who used her patients' information to aid her successful 2015 campaign for Virginia state senator in violation of the HIPAA Privacy Rule won't be sanctioned by federal regulators.

$475,000 HIPAA Penalty for Tardy Breach Notification

Marianne Kolbasuk McGee • January 9, 2017

In a reminder of HIPAA's tough requirements for breach notification, federal regulators have issued a $475,000 financial settlement and corrective action plan for Chicago-based Presence Health tied to its tardy notification for a 2013 paper records breach affecting only about 800 individuals.

Major Breach: Insurer Blames System Integrator

Marianne Kolbasuk McGee • December 22, 2016

Community Health Plan of Washington, a not-for-profit insurance company, says a security vulnerability on the computer network of a business associate resulted in a breach affecting nearly 400,000 individuals.

UCLA Health Cyber-Attack Affects Millions

Marianne Kolbasuk McGee • July 17, 2015

In the latest in a string of major cyber-attacks in the healthcare sector, UCLA Health confirms that information on 4.5 million individuals may have been exposed when hackers breached its network in an attack that appears to have begun last September.

Do You Know What Your BAs Are Doing?

Marianne Kolbasuk McGee • July 17, 2015

Does your organization really have a clear idea of what measures your business associates are taking to safeguard your most sensitive data? Yet another breach, this one affecting Arkansas Blue Cross Blue Shield, points to the risks.

BCBS Plans Offer Blanket ID Protection

Marianne Kolbasuk McGee • July 14, 2015

In the wake of several mega breaches affecting its affiliates, the Blue Cross Blue Shield Association says all 36 of its affiliated plans will offer free identity protection services for as long as individuals are enrolled in their insurance coverage.