PrivacySignal
Healthcare

Many Medical Devices Incapable of Supporting Transition to Post-Quantum Cryptography

HIPAA Journal · · US Federal · Healthcare Privacy

An analysis of medical devices found that most cannot support post-quantum cryptography, leaving healthcare organizations exposed to future attacks from quantum computing. Only a fraction of devices in use today have the hardware or software capacity to handle the transition to stronger encryption standards.

Why this matters: Medical devices are not like laptops. You cannot just push an update and move on. Many run for years or decades on fixed hardware, inside patients or beside hospital beds, and the manufacturers may no longer exist. When quantum computing makes today's encryption breakable, the data these devices transmit — vitals, implant signals, dosing — becomes readable to anyone with the right tools. The risk is not theoretical. It is a countdown, and hospitals are already behind. The harder problem is that upgrading takes money, regulatory approval, and hardware replacements most health systems are not ready for.

Who should care: Healthcare professionals · Privacy officers · Compliance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Healthcare Critical
HIPAA Journal · · US Federal

Citrix Patches Third Actively Exploited NetScaler Zero Day

Citrix has issued a patch for a third actively exploited zero-day vulnerability in its NetScaler product, releasing the fix within days of addressing two previous flaws that were also under active attack.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare#security Read original →
Healthcare
HIPAA Journal · · US Federal

Website Privacy: Your Privacy Policy Makes Promises But Does Your Website Keep Them?

Many organizations publish privacy policies that do not reflect what their websites actually do, because compliance teams often lack full visibility into the third-party tools running on their sites, what data those tools collect, and where that data goes.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · Policy

#healthcare#regulation#privacy Read original →
Healthcare
HIPAA Journal · · US Federal

CISA Sends CIRCIA Final Rule for White House Review

CISA has completed its final rule under the Cyber Incident Reporting for Critical Infrastructure Act and sent it to the White House for review. The rule, once approved, would establish mandatory cyber incident reporting requirements for critical infrastructure sectors.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#regulation Read original →
Healthcare
DataBreaches.net · · International

Senate passes bipartisan bill to bolster hospital cybersecurity

The Senate passed the Health Care Cybersecurity and Resilience Act by unanimous consent, a bipartisan measure designed to help hospitals and healthcare providers improve their cybersecurity defenses and better protect patient data.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →
Healthcare
DataBreaches.net · · International

Medical records giant Epic pauses product development to fix security bugs that risk patients’ data

Epic Systems, the company behind the widely used MyChart patient portal, has halted most of its product development to address security vulnerabilities that could expose patient data. The decision, confirmed by founder and CEO Judy Faulkner, signals an unusual prioritization of security over new features.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →