DENTAL DATA BREACH: Paper is Safer – It Always has Been!

By Darrell K. Pruitt DDS

***

***

PAPER IS SAFER – IT ALWAYS HAS BEEN!

“9M dental patient records published following LockBit ransomware attack”

By Duncan Riley for Silicone Angle, May 30th, 2023
READ: https://siliconangle.com/2023/05/30/9m-dental-patient-records-published-following-lockbit-ransomware-attack/

***

We knew digital dental records were never safe, even though our trusting patients had no idea. I started warning dentists about sudden public rejection of electronic dental records over a decade ago. In fact, that is why the Texas Dental Association suspended my membership.

It’s the start of the predictable end of digital records in most dental offices. The TDA and the ADA were repeatedly warned, but chose to say nothing about the comparative security of paper to dues-paying members. In fact, the American Dental Association marketed its own digital dental record system until a few years ago when over 500 dental practices using their system were hacked. Then the ADA quietly sold it.

“The records of nearly 9 million people have been published online following a LockBit ransomware attack on Managed Care of North America. The company, also known as MCNA Dental, is a leading provider of dental plans in the U.S., serving private employers, individuals and families through a range of Medicare, long-term and commercial plans. MCNA is also the largest dental insurer for government-sponsored Medicaid and Children’s Health Insurance Program, programs.”

The question is, what will this news do to huge, multi-location dental franchises such as Aspen Dental, Monarch, Medicare and other discount dentistry centers. Dentists have proven they can run successful, large practices using pegboards, ledger cards and bulky, loud metal filing cabinets without risking their patients’ privacy.

By the way, my practice is accepting new patients. Oh yea: TDA, you still owe me $200 in prorated dues for the remainder of the year you kicked me out. Idiots!

***

COMMENTS APPRECIATED

Thank You

***

***

ASPEN DENTAL: Cyber Attack with Data Breach

By Darrell Pruitt DDS

***

***

Aspen Dental has been hit by a cyber attack.  Aspen has over a thousand dental offices across the nation, and even though their official website says there are no signs of patient information being compromised, the American Dental Association is calling it a “breach,” since the attack involved ransomware.

If Aspen Practices each maintain dental records on 10,000 patients, and there are over a thousand Aspen locations, that would mean more than 10 million patients’ records were potentially breached. Texas has 58 Aspen locations – second only to Florida which has 124. (There are three Aspen locations near me in the Dallas-Fort Worth metroplex).

Last of all, history has shown that businesses which suffer one ransomware attack are likely to be targeted a second or even third time. It never ends. And then there are the HIPAA violations and remediation … This is bad for Aspen Dental.

Related: https://www.pact-one.com/2023/05/aspen-dental-cyber-attack-1000-dental-practices-affected-nationwide/

***

COMMENTS APPRECIATED

Thank You

***

***

Dental EHRs are a Scam?

Electronic dental records are a scam. They have always been a scam.

By Darrell Pruitt DDS

“Microsoft & Google unable to detect new zero-day ransomware.” By Anthony Spadafora for ITProPortal, February 7, 2018
https://www.itproportal.com/news/microsoft-google-unable-to-detect-new-zero-day-ransomware/

Spadafora: “The ShurL0ckr ransomware was able to avoid detection by a majority of anti-virus engines and cloud applications. As organisations have adopted cloud services to increase their productivity and agility, so to have hackers who see cloud services as the next big target for distributing malware and stealing sensitive data from businesses and individuals.”

Over a decade ago, I warned the American Dental Association leadership about EHRs’ poor security. So did ADA leadership warn Congress? Oh hell no.

“Patient records will be adequately protected through organizational policies and technical security controls.”Dr. Robert H. Ahlstrom, representing the ADA in testimony before the National Committee on Vital and Health Statistics (NCVHS) on the benefits of EHRs in dentistry.

(See: “Testimony of the American Dental Association, National Committee on Vital and Health Statistics Subcommittee on Standards and Security July 31, 2007.”) http://www.ncvhs.hhs.gov/070731p08.pdf

Assessment

Conflict of interest caused unaccountable leaders to lie to us, Doc. How does that make you feel?

Conclusion:

Your thoughts and comments on this ME-P are appreciated. Feel free to review our top-left column, and top-right sidebar materials, links, urls and related websites, too. Then, subscribe to the ME-P. It is fast, free and secure.

Speaker: If you need a moderator or speaker for an upcoming event, Dr. David E. Marcinko; MBA – Publisher-in-Chief of the Medical Executive-Post – is available for seminar or speaking engagements. https://medicalexecutivepost.com/dr-david-marcinkos-bookings/

Contact: MarcinkoAdvisors@msn.com

Subscribe: MEDICAL EXECUTIVE POST for curated news, essays, opinions and analysis from the public health, economics, finance, marketing, I.T, business and policy management ecosystem.

ADA President and Broken Promises

The Future President

By Darrell K. Puritt; DDS

pruitt8

The election for a future ADA president occurs the first week in October in Hawaii at the 2009 annual meeting. A couple of days ago, the ADA News Online posted the ADA President-elect candidates’ statements.

http://www.ada.org/prof/resources/pubs/adanews/adanewsarticle.asp?articleid=3133

All three sound like they support meaningful dialogue with membership: Candidate Dr. Raymond Gist says one of his goals is: “To protect and preserve ownership of the intellectual property of the ADA while demonstrating transparency and fostering an understanding of how our system works.” Candidate Dr. William Glecos says “My first goal will be to coordinate and improve our communication efforts within the ADA. To make sure we are engaging all our members and imparting a sense of connection and transparency.” Candidate Dr. Marie Schweinebraten says “… communication, internal and external, must be improved to respond in today’s world … barriers must be eliminated to allow member input and volunteer involvement when solving specific issues.” I’ve seen candidates use these same buzzwords before, but not mean them. Dentistry is being severely threatened right now, and I’m too young to retire. So I want to see a future leader confident enough to walk through fire with me on behalf of my patients.

Promises from ADA President-elect candidates have been very disappointing so far. Past President Dr. Mark Feldman, President Dr. John Findley and President-elect Dr. Ron Tankersley each promised “transparency.” Feldman and Findley broke their promises very early, and so far, Tankersley has done no better. Nine months ago I invited Dr. Tankersley to a conversation about the future of electronic dental records and he chose to insult me with silence rather than respond. I took it personally, Ron, and I’ll never forget it. Because all three of these presidents are simply rude people, it wouldn’t bother me to never ask any of them for friendship. 

So do you think our fresh leaders are any more sincere about transparency with membership? Or are they also hoping to be safely elected. This could be an opportunity for one or more of the three to break loose and be counted as a brave leader… or not. Let me show you what Feldman, Findley and Tankersley have gotten us into. Below is a list of duties expected of dentists with NPI numbers that came out today on ANCO Online. If any of you three candidates have the courage to respond to my challenging comments about what I consider to be a perfect example of a renegade department, jump right in. Concerned members need to be warned about the courage we can count on. If you cannot defend the Department of Dental Informatics, just say so. We’ll all be better off. And on truth, we can build. What an opportunity for you! I bet one could easily gain the delegates’ attention by doing the right thing, even if it is unpopular at first to those who may have helped you to power.

Responding to this article in a respectful, professional way could be just what it takes to get a person elected to the highest position in the American Dental Association. That’s what you intensely want, isn’t it? You just have to recognize what I am spelling out for you, Raymond, William and Marie. Just look at the growing discontent with the ADA on the Internet. Whoever is the first to show sincerity and courage, will become a hero to those of us who feel betrayed by those we once trusted. Victory will never be easier. I’ve had a look around. Believe me when I tell you that things are soo bad that even I could be a contender. Don’t make me run for the job.

Here is the first issue for discussion if you are interested: For dentists who were persuaded by the ADA Department of Dental Informatics to quickly volunteer for the 10 digit identifying number, let me ask you this: If you had been told what ADA employees are paid to tell you, which you can read below, would you have applied for an NPI number? And if you were forced to apply for a number by a managed care contract with BCBSTX, Delta Dental or other discount dentistry broker, would that be considered an unfair business practice?

Let’s look at fairness: Who does the NPI number help? Dental patients or BCBSTX? Or perhaps the ADA? We were told again and again in ADA News Online articles written by Arlene Furlong that the best reason for the NPI number was convenience. She said office managers would love it because it would replace numerous identification numbers. When one reads the list of NPI obligations a dentist volunteers their office manager for, all those other numbers don’t seem so bad after all. Why was HIPAA so important that the ADA Department of Dental Informatics forced employees under its supervision to intentionally mislead membership? Does the ADA work for dentists and their patients or for CMS? There you go, Dr. Raymond Gist, Dr. William Glecos and Dr. Marie Schweinebraten. It’s your turn now. If you have the guts to step up to a challenge, it could pay off big. Besides, even if you get elected without first responding to my concerns doesn’t mean you’ll get rid of me. Oh heaven’s no.

D. Kellus Pruitt; DDS

http://anco- .blogspot.com/2009/08/asco-coa-cms-palmettoj1mac-news.html

**** CMS NEWS ****

This message is for health care providers, particularly physicians and other practitioners, who have obtained National Provider Identifiers (NPIs) and have records in the National Plan and Provider Enumeration System (NPPES). The Centers for Medicare & Medicaid Services (CMS) recommends that each health care provider, including individual physicians and non-physician practitioners: · Secure and maintain their own NPPES account information (i.e., User ID, Password, and Secret Question/Answer) for safety and accessibility purposes. Health care providers should maintain the confidentiality of their User ID, password, and Secret Question/Answer in order to protect their NPPES information from unauthorized access. Reset their NPPES passwords at least once a year.

See the NPPES Application Help page at https://nppes.cms.hhs.gov/NPPES/Help.do and select the ‘Reset Password Page’ for applicable rules. Those rules indicate the length, format, content and requirements of NPPES passwords. Review their NPPES records in order to ensure that the information reflects current and correct information. Covered health care providers are required to update their NPPES information within 30 days of the effective date of the change.

Viewing NPPES Information Health care providers, including physicians and non-physician practitioners, can view their NPPES information in one of two ways: (1) By accessing the NPPES record at https://nppes.cms.hhs.gov/NPPES/Welcome.do and following the NPI hyperlink and selecting Login. The user will be prompted to enter the User ID and password that he/she previously created. If the health care provider has forgotten the password, enter the User ID and click the “Reset Forgotten Password” button to navigate to the Reset Password Page. If the health care provider enters an incorrect User ID and Password combination three times, the User ID will be disabled. Please contact the NPI Enumerator at 1-800-465-3203 if the account is disabled or if the health care provider has forgotten the User ID. OR (2) By accessing the NPI Registry at https://nppes.cms.hhs.gov/NPPES/NPIRegistryHome.do.

The NPI Registry gives the health care provider an online view of Freedom of Information Act (FOIA)-disclosable NPPES data. The health care provider can search for its information using the name or NPI as the criterion. Information regarding NPPES data that are FOIA-disclosable can be found at http://www.cms.hhs.gov/NationalProvIdentStand/ by selecting ‘Data Dissemination’. Please note: Business Mailing Address and Business Practice location information (full address and corresponding telephone numbers) are key data elements that are FOIA-disclosable.

Health care providers should not report their residential address unless it is their Business Mailing Address or Business Practice location. The NPPES data appearing on the NPI Registry cannot be deleted; however, it can be updated or changed. Updating NPPES Information Health care providers, including physicians and non-physician practitioners, can correct, add, or delete information in their NPPES records by accessing their NPPES records at https://nppes.cms.hhs.gov/NPPES/Welcome.do and following the NPI hyperlink and selecting Login. The user will be prompted to enter the User ID and password that he/she previously created.

Please note: Required information cannot be deleted from an NPPES record; however, required information can be changed/updated to ensure that NPPES captures the correct information. Certain information is inaccessible via the web, thus requiring the change/update to be made via paper application. The paper NPI Application/Update Form (CMS-10114) can be downloaded and printed at http://www.cms.hhs.gov/cmsforms/downloads/CMS10114.pdf.

Deactivating the NPI Health care providers, including physicians and non-physician practitioners, can deactivate their NPIs if the NPIs are no longer required or needed. Reasons for deactivation include retirement, business dissolved, or death of the health care provider. A request for deactivation must be submitted via paper application. The paper NPI Application/Update Form (CMS-10114) can be downloaded and printed at http://www.cms.hhs.gov/cmsforms/downloads/CMS10114.pdf.

Health care providers should review the instructions located on the application regarding deactivations in order to properly complete the deactivation request. The Power of Attorney or Executor of the Will may complete the application for deactivation due to death of the health care provider.

Need More Information?

Providers can apply for an NPI online at https://nppes.cms.hhs.gov or can call the NPI enumerator to request a paper application at 1-800-465-3203. Visit CMS’ dedicated NPI web page at www.cms.hhs.gov/NationalProvIdentStand for additional NPI information.

Channel Surfing

Have you visited our other topic channels? Established to facilitate idea exchange and link our community together, the value of these topics is dependent upon your input. Please take a minute to visit. And, to prevent that annoying spam, we ask that you register.  

Link: http://feeds.feedburner.com/HealthcareFinancialsthePostForcxos

Speaker: If you need a moderator or speaker for an upcoming event, Dr. David E. Marcinko; MBA – Publisher-in-Chief of the Executive-Post – is available for seminar or speaking engagements. Contact: MarcinkoAdvisors@msn.com 

Get our Widget: Get this widget!