Office of Civil Rights D of H and HR. OCR Portal of Health Information Breaches Affecting 500 or More Individuals [Internet]. 2025 [cited 2025 Feb 22]. Available from: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf

Alder S. Change Healthcare Responding to Cyberattack [Internet]. The HIPAA Journal; 2024 [cited 2025 Feb 22]. Available from: https://www.hipaajournal.com/change-healthcare-responding-to-cyberattack/

Warner MR. Cybersecurity is Patient Safety [Internet]. Office of Senator Mark R. Warner; 2022 [cited 2025 Feb 22]. Available from: https://www.warner.senate.gov/public/_cache/files/f/5/f5020e27-d20f-49d1-b8f0-bac298f5da0b/0320658680B8F1D29C9A94895044DA31.cips-report.pdf

Whitfill J. Data Security and Patient Privacy. In: Branstetter BFI, editor. Practical Imaging Informatics: Foundations and Applications for Medical Imaging. 2nd ed. New York, NY: Springer; 2021. p. 119–30.

Google Scholar 

European Society of Radiology (ESR). (2014) Renewal of radiological equipment. Insights Imaging. 5(5):543–6.

Das Gupta S, Shah D. (2024) Safeguarding the future of radiology with imaging informatics. AuntMinnie.com. Mar 28

Grimes SL, Wirth A. The Case for Medical Device Cybersecurity Hygiene Practices for Frontline Personnel. Biomed Instrum Technol. 2021 Jul;55(3):96–9.

PubMed  PubMed Central  Google Scholar 

HIPAA Journal Staff. (2021) Radiology Specialists Facing Class-Action Lawsuit Over PACS Data Breach [Internet].HIPAA Journal. Available from: https://www.hipaajournal.com/radiology-specialists-facing-class-action-lawsuit-over-pacs-data-breach/

Davis J. (2021) Millions of medical images, patient data remain exposed via PACS flaws [Internet]. SC Media; Available from: https://www.scworld.com/news/millions-of-medical-images-patient-data-remain-exposed-via-pacs-flaws

Cawthra J, Kuruvilla J, Littlefield K, Niemeyer B, Wang S, Williams R, et al. (2020) Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector [Internet]. National Institute of Standards and Technology (NIST). Available from: https://www.nccoe.nist.gov/publication/1800-24/VolA/

Shah C, Nachand D, Wald C, Chen PH. Keeping Patient Data Secure in the Age of Radiology Artificial Intelligence: Cybersecurity Considerations and Future Directions. J Am Coll Radiol. 2023 Sep;20(9):828–35.

PubMed  Google Scholar 

Kelly BS, Quinn C, Belton N, Lawlor A, Killeen RP, Burrell J. Cybersecurity considerations for radiology departments involved with artificial intelligence. Eur Radiol. 2023 Jul 7;33(12):8833–41.

PubMed  PubMed Central  Google Scholar 

Zandesh Z. Privacy, Security, and Legal Issues in the Health Cloud: Structured Review for Taxonomy Development. JMIR Form Res. 2024 Feb 12;8:e38372.

Google Scholar 

Mirsky Y, Mahler T, Shelef I, Elovici Y. (2023) CT-GAN: Malicious Tampering of 3D Medical Imagery using Deep Learning [Internet]. arXiv; 2019 [cited Feb 8]. Available from: http://arxiv.org/abs/1901.03597

McGinty G. #DitchtheDisk. J Digit Imaging. 2022 Aug;35(4):737–8.

PubMed  PubMed Central  Google Scholar 

American College of Radiology.(2019) ACR–AAPM–SIIM Practice Parameter for Electronic Medical Information Privacy and Security [Internet]. Jan. Available from: https://www.acr.org/-/media/ACR/Files/Practice-Parameters/Elec-Info-Privacy.pdf

United States Health and Human Services. The HIPAA Security Rule [Internet]. Available from: https://www.hhs.gov/hipaa/for-professionals/security/index.html

U.S. Code of Federal Regulations, Title 45, § 164.308: Administrative safeguards [Internet]. Available from: https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.308

U.S. Code of Federal Regulations, Title 45, § 164.310: Physical Safeguards [Internet]. Available from: https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.310

U.S. Code of Federal Regulations, Title 45, § 164.312: Technical Safeguards [Internet]. Available from: https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C/section-164.312

United States Health and Human Services. The HIPAA Privacy Rule [Internet]. Available from: https://www.hhs.gov/hipaa/for-professionals/privacy/index.html

U.S. Code of Federal Regulations, Title 21, § 11.10: Controls for closed systems [Internet]. Available from: https://www.ecfr.gov/current/title-21/chapter-I/subchapter-A/part-11/subpart-B/section-11.10

National Institute of Standards and Technology. NIST SPECIAL PUBLICATION 1800–26 [Internet]. [cited 2025 Apr 11]. Available from: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.1800-26.pdf

Office of Consumer Affairs and Business Regulation. 201 CMR 17.00: Standards for the Protection of Personal Information of Residents of the Commonwealth [Internet]. Nov, 2009. Available from: https://www.mass.gov/doc/201-cmr-17-standards-for-the-protection-of-personal-information-of-residents-of-the-commonwealth/download

Hady AA, Ghubaish A, Salman T, Unal D, Jain R. Intrusion Detection System for Healthcare Systems Using Medical and Network Data: A Comparison Study. IEEE Access. 2020;8:106576–84.

Google Scholar 

Nguyen XV, Petscavage-Thomas JM, Straus CM, Ikuta I. Cybersecurity in radiology: Cautionary Tales, Proactive Prevention, and What to do When You Get Hacked. Curr Probl Diagn Radiol. 2024

Eichelberg M, Kleber K, Kämmerer M. Cybersecurity in PACS and medical imaging: an overview. J Digit Imaging. 2020;33(6):1527–42.

PubMed  PubMed Central  Google Scholar 

U.S. Food and Drug Administration. Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions, Guidance for Industry and Food and Drug Administration Staff [Internet]. 2023. Available from: https://www.fda.gov/media/119933/download

U.S. Department of Health and Human Services. Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients (HICP) [Internet]. U.S. Department of Health and Human Services; 2023. Available from: https://405d.hhs.gov/Documents/HICP-Main-508.pdf

Health Information Technology for Economic and Clinical Health (HITECH) Act [Internet]. 2009. Available from: https://www.govinfo.gov/content/pkg/PLAW-111publ5/pdf/PLAW-111publ5.pdf

Office for Civil Rights, U.S. Department of Health and Human Services. Breach Notification Rule [Internet]. 2013. Available from: https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html

Federal Food, Drug, and Cosmetic Act, § 524B [Internet]. Available from: https://www.federalregister.gov/documents/2023/09/27/2023-20955/cybersecurity-in-medical-devices-quality-system-considerations-and-content-of-premarket-submissions

Larsen E, Hoffman D, Rivera C, Kleiner BM, Wernz C, Ratwani RM. Continuing Patient Care during Electronic Health Record Downtime. Appl Clin Inform. 2019 May;10(3):495–504.

PubMed  PubMed Central  Google Scholar 

Chen PH, Bodak R, Gandhi NS. Ransomware Recovery and Imaging Operations: Lessons Learned and Planning Considerations. J Digit Imaging. 2021 Jun;34(3):731–40.

PubMed  PubMed Central  Google Scholar 

Maggio LA, Dameff C, Kanter SL, Woods B, Tully J. (2020) Cybersecurity Challenges and the Academic Health Center: An Interactive Tabletop Simulation for Executives. Acad Med J Assoc Am Med Coll. 24

Federal Bureau of Investigation. (2016) Ransomware Prevention and Response for CISOs [Internet].Federal Bureau of Investigation. Available from: https://www.fbi.gov/file-repository/ransomware-prevention-and-response-for-cisos.pdf

Cichonski P, Millar T, Grance T, Scarfone K. (2012) Computer Security Incident Handling Guide : Recommendations of the National Institute of Standards and Technology [Internet]. National Institute of Standards and Technology; 2012 Aug [cited 2025 Apr 16] p. NIST SP 800–61r2. Report No. NIST SP 800–61r2. Available from: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf

Centers for Medicare & Medicaid Services, U.S. (2025) Department of Health and Human Services. 42 CFR § 482.15: Condition of Participation: Emergency Preparedness [Internet]. Available from: https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-G/part-482/subpart-B/section-482.15

Jalali MS, Kaiser JP. Cybersecurity in Hospitals: A Systematic, Organizational Perspective. J Med Internet Res. 2018 May 28;20(5):e10059.

PubMed  PubMed Central  Google Scholar 

ASPR TRACIE. Cyber Incident Response Checklist [Internet]. 2021. Available from: https://files.asprtracie.hhs.gov/documents/healthcare-system-cybersecurity-incident-response-checklist.pdf

ASPR TRACIE. (2020) Cyber Incident System Restoration Checklist [Internet]. Available from: https://files.asprtracie.hhs.gov/documents/healthcare-system-cybersecurity-incident-system-restoration-checklist.pdf

Ghayoomi H, Laskey K, Miller-Hooks E, Hooks C, Tariverdi M. Assessing resilience of hospitals to cyberattack. Digit Health. 2021;7:20552076211059366.

PubMed  PubMed Central  Google Scholar