Identify security risks of My Health Record by RMIT STEM

2024-03-05 04:12:19 UTC

Risk: My Health Record requires a login to myGov, here a risk of identify theft arises. Identify theft in this form could have serious implications for the personal affected as the thief has access to their private medical history.

Solution: Potentially implementing double authentication or creating a code and sending it to the persons personal device to enter and login with. Hence, it is harder for identity theft to occur.

2024-03-08 09:07:49 UTC

My Health Record involves typing in a password for access. If a hacker figures out a password they can gain access to a users information and hold it for ransom, demanding payment to stop them from stealing/selling/releasing it.

A solution would be to have users create strong and unique passwords to prevent passwords being guessed.

2024-03-12 04:31:09 UTC

Data leaks could be used to gain personal medical information from users. This information could be used as blackmail to gather other personal information or for monetary gain. Encrypted data can help protect information and prevent data leaks!

2024-03-13 07:09:58 UTC

Individuals could accidental give someone access to their private records over public Wi-Fi networks where data isn't protected and can be viewed by others connected to the network. To ameliorate this the application or website should provide a warning message when the individual tries to login on a public network or block them from logging in.

2024-03-14 08:07:32 UTC

MyHealth Record requires individual's to login in by entering their password. The access to this password can lead to data breaches unauthorised access, theft pf data and exposure of sensitive medical and personal information. To mitigate this, MyHealth Record could require people to respond to a verification message to confirm that they are trying to log in in order to prevent unauthorised access to their account

2024-03-15 01:15:53 UTC

Being My Health Record is a government operated website it is associated to a larger variety of medical services and hospitals located continent wide and if any one of these is comprised it may pose a risk of a further breach into various records located even outside the specific service via the My Health Record Application. To avoid this MyGov can ensure records processed on and input and output basis from a service or hospital to the client are encrypted thoroughly and there is little to no communication between specific health services