BankThink Equifax breach threatens bank reputations, too

americanbanker.com

“However, while determining any potential legal liability is important, it is not the most important issue that banks should address immediately. Rather, the core question is how can the bank protect its customers? Should it be reactive or proactive?”

The answer is proactive. It is time for banks and other companies to put the customer first and truly protect them and their identity. The suggested credit monitoring will not protect the consumer or their personal information. The proactive solution needed can be found at Tascet, where we provide privacy, security and anonymity. Consumers should expect nothing less.

 

Dark Web Selling Breached Equifax Data for $2.7 Million

yournewswire.com

Be aware that the Equifax breach will affect every business that sells goods or services in the United States. Progressive companies will take advantage of this crisis by being proactive and creating a personal firewall for their customers. Tascet provides for this proactive solution and creates a much higher value of good will for customers. Keep in mind that there is a strong possibility that you personally or your family members have had their information compromised. It may not be apparent for a few years, however it will eventually. Remember  credit monitoring will not stop the fraudsters, it’s only another way to pick your pocket.  Once the data is out it’s too late.

Equifax Breach

databreachtoday.com

The long-term repercussions from this breach are going to have a lasting effect on both businesses and consumers.

Consumers need to demand privacy and security, as a condition of doing business. TASCET provides privacy, security and anonymity.

How blockchain could help boost healthcare security

healthdatamanagement.com 

“If the perfect system were created and all healthcare records were part of the same blockchain ledger, it could potentially allow medical professionals to see all associated records and prove the patient’s identity and other treatments they have received.”

As the entry point for blockchain technologies, TASCET’s Super ID offers identity and anonymity, which provides integrity and trust to blockchain and ledger technology. TASCET ensures patients are correctly identified and matched to their medical record, and only their medical record, within a health system and across the healthcare ecosystem.

 

Maersk says Nyetya cyberattack cost it $300M in revenue loss

ciodive.com

“The attack brought Maersk’s operations to a grinding halt, shutting down terminal operations around the world. The company has since put additional defensive measures in place and is reviewing how to further protect its systems from attack.”

At TASCET, we acknowledge the need for companies to take proactive steps to protect themselves. Our solution not only provides a tool for organizations to secure and monitor access to protected data but it minimizes the risk associated with cyberattacks by anonymizing that data as well.

What’s the Highest Value Card in Your Employee’s Wallets?

idexpertscorp.com

“The ability to steal and easily sell massive amounts of personal information has transformed the economics of information theft. Victims can spend hundreds of hours and thousands of dollars cleaning up credit or medical records, clearing their names, or otherwise re-establishing their identities.”

At TASCET, we link a digital identity to an individual rather than information that is easily misused, protecting consumers from fraud and preventing the use of multiple identities to commit fraud.

 

 

Medical Data Breaches: The Latest Health Care Epidemic

publichealthonline.gwu.edu

“During cyberattacks, unauthorized people gain access to confidential information, referred to as protected health information (PHI), in a variety of ways. Stolen PHI poses a different set of threats than personal information that’s taken from retail stores and other non-medical businesses.”

At TASCET, we realize not only the importance of securing patient data but also the need to make that data invaluable to a potential hacker. Our identification process ensures an individual is not attributed to multiple identities, whether through human error or an attempt at fraud.

Protecting your name

image004By, Jason Busch:

Protecting your privacy and personal information is a major concern for most people. Regardless of whether or not you have “something to hide,” nobody likes the thought of their personal information being made available to any and everybody, especially when that information contains private medical records.

These days, data breaches and hackers regularly make the evening news, and no one’s information seems safe. However, one local company is stepping into the breach with its effort to ensure patient health care records are safe and secure.

Madison-based TASCET Inc. released its Unique Patient Identifier (UPI) in early August, with the goal of creating a foundation for interoperability across the entire health care system and removing the financial threat of synthetic identities.

“The UPI solves the most difficult challenge to patient safety: ensuring that patient records cannot be compromised due to mismatching, duplication, fraud, or data breaches,” says Larry Aubol, CEO of TASCET.

The Identity Theft Resource Center reports that more than 109 million patient records were compromised in breaches since January 2015, in addition to those suffered across industries and the U.S. government. The compromised information is sold and resold, enabling criminals to pair valid information with false information to create synthetic identities and commit fraud, leaving patients and health care systems at great risk, Aubol notes.

“Even before data breaches became systemic, development of a UPI solution was prompted by basic patient safety concerns,” Aubol recalls. “The biggest obstacle has been making the UPI inherently secure so that patient records are always protected from unauthorized access, and that’s exactly what we do.”

TASCET was founded in 2005 as a digital enterprise risk management company to combat identity fraud by using the principle of “one person, one identity.”

“There is no standard industrial classification number for services we provide, which is unique identity numbers that cannot be duplicated, misused, or stolen, and can only belong to one person,” TASCET Senior Vice President Kari Douglas says. “Our issuance of numbers based on a Super ID — as it’s called — addresses the unmet identification needs for compliance by the health care, financial services, retail, government, travel, academia, and cyber industries.”

In 2008, the RAND Corporation examined the benefits of a unique patient identifier for the U.S. healthcare system. Its report highlighted six attributes outlined in the American Society for Testing and Materials (ASTM) standard, which called for the UPI to be unique and canonical, invariable, nondisclosing, verifiable, ubiquitous, and limited in use to accessing health information.

“To be both unique and canonical, a patient identifier must prevent multiple patients from being assigned to the same patient identifier, while also ensuring that the same patient is not attributed to more than one identifier, across the nationwide healthcare system,” explains Aubol. “The UPI accomplishes these and the other attributes noted by RAND, all while protecting the privacy of the patients and improving revenue cycle management for providers.”

Douglas says it is estimated that the current accuracy rate of patient ID matching at even the most sophisticated hospitals is only around 80%, which means there is a one in five chance that a patient’s safety, privacy, or security will be compromised.

“The only way to produce a unique identifier is to start with the person,” Douglas explains. “Patients grant permission when they visit a hospital, clinic, pharmacy, or their doctor to activate their ‘Super ID.’ The Super ID is the consumer-facing brand name that says they are protected from misuse of their identity because their identity is no longer based on other people’s data.”

The identifier is created in 30 seconds or less. The process takes two finger proofs and a face proof along with non-sensitive biographical information to create a unique 16-digit number, the Unique Patient Identifier, or Standard Patient Number. On the next visit, the patient simply confirms their identity with a finger proof or facial proof to access their medical record and only their record.

TASCET did not invent a unique patient identifier to protect from data breaches; obviously, no one can do that, Douglas notes. “Our focus is on the patient. With all the data breaches that have occurred and will occur, TASCET took it upon itself to protect the most important asset of a healthcare provider — the patient.

“TASCET does not see or store patient records,” Douglas continues. “TASCET cannot access patient records. We do not data-mine and are non-transactional. We do one thing: we create identifiers that can give patients anonymity and privacy.”

The impact of TASCET’s UPI technology goes beyond just the health care industry. Each industry has a separate unique number. Each number is used to protect the consumer and provide for the highest level of compliance mandated within each industry. An individual could receive 10 unique identifiers from TASCET throughout their lifetime, Douglas says — each one being random, unique, and only utilized by them.

“According to the FBI, health care fraud is costing the nation $80 billion per year,” Douglas says. “It’s not known how much of that is caused by identity fraud, but a substantial amount can be eliminated by knowing who the patient is and who the provider is. TASCET’s identity infrastructure answers both of these questions.

“Synthetic identities are the rising tide of fraud that the health care industry needs to face the way banking and retail have just begun to understand them,” Douglas adds. “But to stop the use of synthetic identities to commit fraud in healthcare, ‘one patient, one record’ is a must.”

While TASCET only recently announced the product, Douglas says the company has been in discussions with many of the largest health care systems in the country, as well as forward-thinking Wisconsin hospitals and HMOs, to provide the UPI technology.

“The UPI is just one component,” Aubol notes, “but it is the foundation for interoperability in nationwide health information exchange, and the means to safeguard patients and their privacy.”

New Product Offers Enterprisewide Unique Patient IDs

hdm-logoBy, Joseph Goedert:
Risk management software vendor TASCET Inc. of Madison, Wis, has introduced a unique patient identifier for providers, insurers, health information exchanges and other healthcare organizations.
Enterprise use of the identifier across an organization would increase patient safety and convenience, while also protecting against fraud, says Larry Aubol, CEO at TASCET. The company is marketing unique identifiers in seven industries; the primary markets are healthcare, banking and retail. The vendor is working with Epic Systems to support the identifier for two hospitals that are implementing it, and Cerner has agreed to work support the identifier if clients want it.
The identifier also can be used to ID employees to deter fraudulent activities and get them comfortable with the process that patients will go through to register for the ID. “If employees are not comfortable, they can’t encourage patients to consider the identifier,” Aubol says. Assigning health professionals a unique identifier would help an organization better understand who its affiliated providers are and further can help identify health professionals who are assessing patient records without authorization.
The identifier has 16 digits. When a patient registers, he or she would be told that the facility wants to create a “super-identifier” that would be consistent across the organization and seeks permission to activate the identifier.  Two fingerprints would be scanned into a recognition system as would a facial scan of the patient, and tied to these identifiers would be the patient name, date of birth, address, gender and county where born. In subsequent visits, the patient would look in a camera or a fingerprint reader to verify identity.
The identifier also could, over time, enhance provider revenue cycles, Aubol says, as banks move toward more prompt payment. TASCET is in discussions with such organizations as Kaiser Permanente, Geisinger Health System, Intermountain Healthcare, Sutter Health, multiple health information exchanges and attorneys, Aubol says. The company expects its first live hospital by the fourth quarter of 2015.

Uniquely Personal Protection

An Iowa community bank rolls out a retail biometric facial and fingerprint security system.

Personalized service is reaching a whole new futuristic level at one Midwest community bank. Bridge Community Bankin Mt. Vernon, Iowa, is introducing a fingerprint and facial identification system into its retail cybersecurity.