Going to the doctor and worrying about cybersecurity

Jeremy Epstein:

For most people, going to the doctor means thinking about co-pays and when they’ll feel better. For me though, it means thinking about those plus the cyber security of the computer systems being used by the medical professionals.


I’ve spent more time than usual visiting doctors recently. I broke my hand – sure I’ll tell you how. It was a hit-and-run accident with a woodchuck.

I was riding my bike, the woodchuck ran in front of me, I ran over him, and he fled into the woods, leaving me lying on the ground moaning in pain. Okay now that we got that out of the way…

So the emergency room doctor ordered a CT scan (to check for a concussion and the presence of a brain) and various x-rays. I thought about the computer controls while in the CT scanner, but what was really interesting was when the hospital emergency room digitized the results and gave them me on a CD to provide to the orthopedist.

Before going to the orthopedist, they had me fill out a bunch of forms online. As I provided the detailed medical information, I wondered how secure the web interface is, and whether someone could attack the medical record system through the patient input interface.