Healthcare Breach Determinants and Implications

• In Event: Research Papers Dialogue Session—Potpourri

Abstract

As medical information is becoming more prized by criminal elements than regular credit card information, the breach potential for healthcare entities increases. In this study, I examine the breaches reported by all entities regarding healthcare information. Applying a situational crime prevention lens, based on routine activity rational choice theory, I examine the determinants of different types of breaches for insights into improvement in information security controls. Using a sample of 1,280 medical information breach incidents from 2010-2015, the results highlight the complementary nature of technical and people controls within a successful information security strategy. The results also support an increased risk profile for governmental and educational entities. Regulators, security professionals, internal auditors, and others should be interested in these results as they reflect the current trends in breaches for the healthcare industry.

Author

• Renee Flasher, Ball State University