Several telecommunications companies, including AT&T, Verizon, and others, recently experienced an unprecedented cyberattack. The attack, labeled “Salt Typhoon” by Microsoft, is one of the largest in U.S. history. The hackers were and, in some cases, still are able to access call records, texts, and live phone calls.
The FBI and the Cybersecurity and Infrastructure Security Agency recommended using encrypted messaging apps to minimize the chances of hackers intercepting their communications. Privacy advocates have long advocated using end-to-end encrypted apps that automatically implement end-to-end encryption in calls and text messages.
HIPAA already requires secured communications with (and about) patients, but many practices and doctors still use personal text to send messages to patients and to other providers about patients. This recent cyberattack underscores the importance of utilizing secure encrypted communications and illustrates the dangers of not doing so.
The best way to do this is usually through a patient portal in the EHR system or through a secure patient texting system offered by companies like Weave or Solution reach.
As always if you have any questions, feel free to reach out.