Health care continues to be a lucrative target for hackers. More than 41% of the population in the United States has had some of their protected health information exposed as a result of the 995 major health care security breaches in the last three years. Hacking/IT incidents; unauthorized access and disclosure incidents, and the loss/theft of physical records and unencrypted devices containing ePHI are the main causes of security breaches in the health care industry.
The HIPAA Privacy Rule of 1996 establishes national standards to protect individuals' medical records and other personal health information (PHI). Both electronic data and paper records are subject to the HIPAA Privacy and Security Rules. The HIPAA Privacy regulations require health care providers and organizations, as well as their business associates, to develop and follow procedures that ensure the confidentiality and security of protected health information (PHI) when it is transferred, received, handled, or shared. If you’re a health care provider or an organization doing business with a provider, then “you are part of the chain of trust accountable for protecting PHI.” CloudVault Health comes to the rescue of such people or organizations responsible for protecting patient’s information. Founded in 2014, CloudVault’s offices are spread across the Greater Atlanta Area, East Coast, and the Southern US.
CloudVault’s ‘Expert’ Solution
The healthcare and related organizations are now the most targeted industry for cybercriminals and insider threats, says Mr. Rusty Gordon, Chairman of CloudVault Health. This is due to the high monetary value of PHI data compared to the value typically derived from financial-related information, he explains. What’s more surprising is that a patient’s medical information is worth 10 times more than their credit card information on the black market. The stolen patient data will not only include information like names, birthdates, but also policy numbers, diagnosis codes and billing information. This data can be used to create fake IDs to buy medical equipment or drugs that can be resold, or to combine a patient number with a false provider number and file made-up claims with insurers, according to many healthcare executives, cybersecurity investigators, and fraud experts.
“Every time a patient engages the healthcare system, whether at a hospital, a physician clinic, an outside lab or even a pharmacy, gigabytes of data are created and shared in the name of efficiency and better patient care,” explains Gordon. “As this information propagates across the broad and varied healthcare data system, healthcare organizations simply lose track of it, to the point where many organizations that are specifically accountable don’t know where all the sensitive data exists across their own networks.”
CloudVault Health is a patented system that continuously guards against loss or misuse of patient information. Its products automatically discover and secure patient information from endpoints and forensically tracks and restrict all data movement. CloudVault Health safeguards sensitive healthcare data, saving hospitals, physicians, insurance companies, and their business associates from costly breaches, HIPAA and Meaningful Use violations, and unintended disclosures.
Unlike legacy solutions that focus on network or application perimeter security, CloudVault Health focuses on securing the data itself. CVH products extend protection to data even when it is not under the direct control of the health care organization. In other words, CVH’s patented solutions continue to track and manage access to sensitive data records when moved between data centers or different business domains.
Simple, yet ‘Smart’ – CloudVault’s Modus Operandi
The CloudVault Health solution is deployed at hundreds or even thousands of endpoints that likely contain PHI. Then, CloudVault Health continuously monitors system endpoints and identifies PHI and probable PHI. Detected PHI is then encrypted and securely moved to the servers that already house the organization’s data. CVH then establish a secure portal for accessing and dispensing sensitive information according to the business’s established rules and policies. Their solution also ensures that the information accessed or copied by employees and business associates remain secure. CVH solution grants organizations the comfort of knowing where the PHI is, and also when it is copied or shared.
CloudVault allows health care businesses to accomplish all of this in the background with minimal awareness and involvement of their endpoint users and technology resources. In a matter of hours, healthcare organizations can dramatically reduce their data risk, improve data protection policy adherence, and know with certainty, where their highly sensitive, highly regulated data actually is, not just where it is supposed to be!
CloudVault Health’s simple, automated deployment enables healthcare organizations to quickly improve their data protection posture, without dependencies on IT staff or planning another large-scale IT project.
CloudVault’s Foreman Rusty Gordon
Rusty Gordon, the Chairman, and CEO of CloudVault Health is a High-Tech Entrepreneur who, over the last thirty years, has led numerous successful business turnarounds, startups, and acquisitions including Knowlagent, iFleet, ADS NetTools, Peachtree Software, and Choice Retail Systems. Mr. Gordon, being a senior officer or board member, has applied his legendary visionary leadership style and business building skills to many technology associations and nonprofit organizations in the Atlanta region.
Mr. Gordon attended the U.S. Naval Academy and received his Bachelor of Industrial Engineering degree from Auburn University in 1975. He was later recognized by the University as an Outstanding Industrial Engineering Alumnus in 2002. Mr. Gordon’s expert thoughts also made it to the Servant Leadership in Action’s collections.
Mr. Gordon is a passionate speaker and a guide and a teacher to many young adults in the metro Atlanta region. Mr. Gordon loves to play baseball, tennis and college football.
“We help providers care for patient information as effectively as they care for their patient’s health.”
“CVH technology can find your PHI-related data, classify and protect it, and ultimately enable your organization to manage access to it—all through a simple, seamless process.”