Dissecting the Henry Schein Data Breach: A Stark Reminder for Dentists to Prioritize HIPAA

December 11, 2023

In October 2023, Henry Schein, a major dental supply distributor, suffered a significant data breach. The ransomware attack compromised sensitive information belonging to both patients and dental practices, including names, addresses, Social Security numbers, and financial information. This incident serves as a stark reminder for dentists of the importance of taking data security and compliance seriously.

Key Takeaways from the Henry Schein Data Breach:

  • Cybersecurity incidents can have a devastating impact on dental practices. The Henry Schein breach caused disruptions to business operations and could potentially lead to legal ramifications for affected practices.
  • Dental practices are increasingly targeted by cyberattacks. The healthcare industry is a prime target for cybercriminals due to the sensitive nature of patient data.
  • Dentists must take proactive measures to protect patient data. Implementing strong cybersecurity measures and adhering to HIPAA regulations are essential to safeguard patient information.

Mitchell Rubinstein DMD, a practicing dentist and noted cybersecurity educator in New York City is hoping this is the wakeup call that dental professionals need to start taking cybersecurity and HIPAA seriously. “An important thing to learn from the Henry Schein breach is that everyone is vulnerable. They’re a multibillion dollar healthcare corporation with far greater resources than any dental practice. If they can fall victim to a cyberattack, then so can any of us.” He went on to add, “Having a plan in place to respond to a cyberattack is just as important as having a plan to prevent one.”

What dentists can do to protect their practices:

  • Conduct regular risk assessments: Identify potential vulnerabilities in your practice’s IT systems, administrative processes and procedures and implement appropriate security measures as necessary.
  • Train employees on cybersecurity awareness: Educate your staff on how to recognize and avoid phishing scams, social engineering attacks, and other common cybersecurity threats.
  • Implement strong passwords and multi-factor authentication: Enforce strong password policies and require the use of multi-factor authentication for all user accounts.
  • Encrypt sensitive data: Encrypt patient data at rest and in transit to protect it from unauthorized access.
  • Secure backups: Regularly back up your data and store backups securely in an offline location.
  • Have a plan in place for responding to data breaches: Prepare a plan for how you will respond to a data breach, including steps for notifying patients, investigating the incident, and taking corrective action.

“The companies we do business with accumulate a great deal of information about us,” Dr. Rubinstein stated. “If that information is compromised in a cyberattack, it can result in several layers of harm, not only to us, but to our patients as well.”

Abyde: Your Partner in Cybersecurity and Compliance

Abyde understands the importance of data security and compliance for dental practices. We offer a comprehensive solution designed to help protect you from data breaches and audits while also helping you ensure HIPAA compliance.

Our solution includes:

  • Automated Security Risk Analysis: With Abyde’s automated Security Risk Analysis, dental professionals can easily check if they’re currently following HIPAA standards, identify possible problem areas, and use specific plans to make their security posture even better.
  • Dynamic Policy Generation: Abyde’s dynamic policy generation is a cutting edge feature that makes creating and updating policies and procedures a breeze. With this tool, your dental practice can effortlessly generate and adapt policies according to the latest compliance standards, ensuring your practice stays up-to-date and secure without the difficulty. 
  • Dedicated Employee Training Portals: Abyde’s Employee Training Portal is your go-to solution for hassle-free compliance training. Our user-friendly platform makes it easy for your team to stay informed on HIPAA regulations and security practices. With interactive modules and convenient access, Abyde ensures your employees are well-equipped to handle sensitive data securely, promoting a culture of compliance within your organization.

By taking data security and compliance seriously, dentists can help prevent data breaches, protect their patients, and avoid legal ramifications. Let’s work together to create a safer environment for everyone involved in dental care. 

Contact Abyde today to learn more about our HIPAA-compliant solutions and how we can help you protect your practice.

Call Abyde! 800.594.0883 or Email Us info@abyde.com

Additional Resources:The Department of Health and Human Services (HHS) website on HIPAA: https://ocrportal.hhs.gov/