University of Phoenix Survey Finds One in Five Healthcare Professionals Have Experienced Patient Data Breaches

Data confirms disconnect in healthcare professionals’ level of confidence in protecting sensitive patient medical and healthcare data

PHOENIX, Jan. 10, 2018 – According to a recent University of Phoenix® College of Health Professions online survey of 504 registered nurses and administrative staff, only a quarter of registered nurses have seen changes in the way their companies handle data security and patient privacy over the past year despite increased data breaches across all industries. The survey found that 20 percent of registered nurses (RNs) and 19 percent of administrative staff indicated that their facilities have experienced a breach of private patient data.¹

However, there appears to be a disconnect between breaches and level of confidence, with 48 percent of RNs and 57 percent of administrative staff noting they are “very confident” in their facility’s ability to protect patient data against potential theft. When asked where they have seen the most changes occur in the industry over the last year, including quality of care, safety, digital health records and prevention and population health, only 25 percent of RNs and 40 percent of administrative staff cite data security and privacy.

“Patient safety is not just about physical and emotional well-being and protection, it also includes electronic records. In our increasingly digital world, it is critical for healthcare professionals at every level to prevent data breaches,” said Doris Savron, executive dean for the Colleges of Health Professions at University of Phoenix. “Everyone in the healthcare industry must work together to establish protocols and implement training to secure and protect all patient data to reduce the risk of being compromised.”

The healthcare industry continues to be one of the highest targeted by cybercriminals, due to its heavy reliance on technology and vast amount of available patient data. The Identity Theft Resource Center notes that, as of November 2017, there have been nearly five million data breaches in the medical/healthcare industry.² According to the IBM’s 2017 Cost of Data Breach Study, healthcare is the most costly industry for data breaches, with organizations spending an average of $380 per impacted record,³ costing the industry approximately $1.9 billion.

As healthcare technology advances and hackers evolve to exploit systems, it is now more important than ever to recognize that organizations need improved, more frequent training for health professionals and more robust company policies. The U.S. is experiencing a shortage of trained cybersecurity professionals across all industries,⁴ but the impact of protecting not only systems but lives, compounded with lower pay, is expanding the job gap in the healthcare industry.⁵ Unfortunately, without the proper cybersecurity teams in place the onus falls on healthcare professionals to protect systems, many of whom are often unaware of how to identify threats and avoid breaches.

“Healthcare organizations are extremely susceptible to human error. If one employee accidently invites malicious malware into a system, the impact can be catastrophic. To limit the amount of breaches, cybersecurity governance must improve,” said Dennis Bonilla, executive dean for the College of Information Systems and Technology at University of Phoenix. “Without improved training and robust cybersecurity response plans incorporated into information technology strategies, the healthcare industry will continue to bear the brunt of these attacks.”

Nurses and staff administrators agree, with 23 percent of RNs and 34 percent of administrative staff stating that additional support and training is needed for healthcare privacy and security.⁶ Current steps being taken to ensure the protection of patient data include:

• Updated privacy and access policies (according to 67 percent of RNs and 69 percent of administrative staff)
• Role-based access (according to 59 percent of RNs and 60 percent of administrative staff)
• Data surveillance (according to 56 percent of RNs and 55 percent of administrative staff)

“Understanding what we do well now to protect patient data can help us create an increasingly sophisticated framework to safeguard this sensitive information,” Savron said. “University of Phoenix offers degree and certificate programs in health professions and IT that help prepare healthcare professionals to provide the best possible care to their patients while taking steps to protect their personal information.”

To learn more about programs offered through the College of Health Professions and College of Information Systems and Technology, visit phoenix.edu. For full survey information and an infographic, visit www.phoenix.edu/media-center/press-release/university-of-phoenix-survey-finds-one-in-five-healthcare-professionals-have-experienced-patient-data-breaches

Survey Methodology

This survey was conducted online within the United States by Harris Poll on behalf of University of Phoenix between Aug. 15–Sept. 1, 2017, among 504 US adults who work full-time in healthcare as either a registered nurse (n=250) or as part of the administrative staff (n=254), and who have worked in their position for at least two years. Figures for age, race/ethnicity, education, region and household income were weighted where necessary to bring them into line with their actual proportions in the population. Propensity score weighting was also used to adjust for respondents’ propensity to be online. For complete survey methodology, please contact Amanda Barchilon.

About University of Phoenix® College of Health Professions

University of Phoenix® College of Health Professions offers leading-edge graduate, undergraduate, certificate, and non-degree programs aimed at preparing students to improve the quality of healthcare in their communities and the industry. The College of Health Professions is helping to ensure that today’s graduates can effectively tackle tomorrow’s healthcare challenges. For more information, visit phoenix.edu/chp.

About College of Information Systems & Technology

University of Phoenix College of Information Systems & Technology is a leader and advocate for the development and advancement of IT in global business operations. The College offers associate, bachelor’s, master’s and doctoral degree programs. Its Faculty Advisory Council, composed of experts and leaders in the field, ensures curriculum is on pace with national and international market demands.  Providing innovative digital learning tools developed to suit all learning styles, the College focuses on building technical knowledge and its successful application to real-world business environments. For more information, visit www.phoenix.edu/degrees/technology.

About University of Phoenix®

University of Phoenix is innovating to help working adults move efficiently from education to careers in a rapidly changing world. Flexible schedules, relevant and engaging courses, and interactive learning can help students more effectively pursue career and personal aspirations while balancing their busy lives. University of Phoenix serves a diverse student population, offering associate, bachelor’s, master’s and doctoral degree programs from campuses and learning centers across the U.S. as well as online throughout the world. For more information, visit phoenix.edu.

¹ This survey was conducted online within the United States by Harris Poll on behalf of University of Phoenix between August 15–September 1, 2017 among 504 US adults who work full-time in healthcare as either a registered nurse (n=250) or as part of the administrative staff (n=254), and who have worked in their position for at least two years. Figures for age, race/ethnicity, education, region, and household income were weighted where necessary to bring them into line with their actual proportions in the population. Propensity score weighting was also used to adjust for respondents’ propensity to be online.

² http://www.idtheftcenter.org/images/breach/2017Breaches/ITRCBreachStatsReportSummary_2017.pdf

³ https://www.ibm.com/security/data-breach

⁴ https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm#tab-6

⁵ http://burning-glass.com/npr-hospitals-face-growing-cybersecurity-threats/

⁶ This survey was conducted online within the United States by Harris Poll on behalf of University of Phoenix between August 15–September 1, 2017 among 504 US adults who work full-time in healthcare as either a registered nurse (n=250) or as part of the administrative staff (n=254), and who have worked in their position for at least two years. Figures for age, race/ethnicity, education, region, and household income were weighted where necessary to bring them into line with their actual proportions in the population. Propensity score weighting was also used to adjust for respondents’ propensity to be online.