Medical identity theft is increasing, in part because of the wealth of personal information available in medical records. And much of this identity theft is coming from within the medical community.

A new law in Congress would require every U.S. citizen to have electronic health records by 2014. It would also set up privacy rules for those records, requiring information keepers to notify patients of security breaches.

Just a few months after Google and Microsoft announced they were launching online consumer health platforms, a nonprofit has unveiled a common framework to protect sensitive medical records.

A network engineer and technical services manager for San Diego's Council of Community Health Clinics was sentenced to 63 months in prison on federal hacking charges.

Two crimeservers containing 500 megabytes of stolen data have been discovered in Argentina and Malaysia. The data was likely being made available online to the highest bidder.

Monitoring and controlling who is accessing data at a health care facility has gotten simpler, reports Greg Masters.

Palm-vein recognition hits that sweet spot of biometrics between security, cost, accuracy and ease of use that make it an optimal physical and IT access control solution for health care organizations.