Cybersecurity
Menu
Cybersecurity graphic

Cybersecurity:
Keeping You Informed


Cyber Lock Graphic

A Message from David Widmann, President and CEO, Konica Minolta Healthcare Americas, Inc.

Konica Minolta Healthcare Americas is committed to providing exceptional healthcare solutions to our customers by deploying cutting edge software, systems, and services. We know that our customers depend on us, now more than ever as we face not only a pandemic but also persistent cybersecurity threats in healthcare.

We are continuously vigilant and take cybersecurity seriously, understanding that surfacing these risks is the responsibility of all of us. This site is developed as a resource for our customers to share information relevant to securing patient data in your operations.

A Message for our Customers

As the Covered Entity your company has the responsibility to protect its PACS system (Exa server) and all interconnecting networks that house PHI data. Please ensure that your organization has the appropriate physical security and cybersecurity deployed to safeguard your PHI data from breach or ransomware. These measures should be aligned to your organizations risk acceptance and privacy rule standards, under the HIPAA regulatory requirements, from the Department of Health and Human Services (“HHS”).

These safeguards are (but not limited to):

  1. Reasonable perimeter security (area access restrictions).
  2. Appropriate network segmentation.
  3. Multiple firewalls and routers.
  4. Data encryption at any points of PHI. “At rest” and “in transit”.
  5. Appropriate endpoint protection. AV / Malware protection, Endpoint Detection and Response EDR.
  6. An appropriate Disaster Recovery and Business Continuity (DRBC) plan that is tested regularly to ensure it will work properly in the event of ransomware attack or system failure.

At no time should you have port 104 (or any other port) open directly to the internet without a robust and up to date VPN that uses 256 AES data encryption.

cybersecurity shield floating over a tablet

HIPPA logo

Security & Privacy Environments

  • February 1, 2021

    HIPAA Fundamentals – An introduction to the fundamentals of HIPAA compliance.

    ecFirst Download File
  • February 1, 2021

    HIPAA Covered Entities – An Infographic

    ecFirst Download File
  • February 1, 2021

    HIPAA Business Associate — An Infographic

    ecFirst Download File
  • February 1, 2021

    HIPAA Security Rule Crosswalk to NIST Cybersecurity Framework

    U.S. Department of Health & Human Services Download File
  • May 3, 2020

    Summary of the HIPAA Privacy Rule – Who is covered? What information is protected? How protected health information can be used and disclosed?

    U.S. Department of Health & Human Services Download File

Cybersecurity Education & Training

  • April 11, 2021

    CISA Security Tip (ST19-001) — Protecting Against Ransomware

    U.S. Cybersecurity & Infrastructure Security Agency Website Link
  • February 1, 2021

    Ransomware: Fast Facts – An Infographic

    ecFirst Download File
  • February 1, 2021

    Ransomware Guidance from U.S. Department of Health & Human Services

    U.S. Department of Health & Human Services Website Link
  • February 1, 2021

    Quick-Response Checklist from the HHS, Office for Civil Rights (OCR)

    U.S. Department of Health & Human Services Download File
  • June 7, 2011

    Cyber Attack Quick Response

    U.S. Department of Health & Human Services Download File
man holding a globe made of computer screens

Hand holding floading gold shield

Best Practices

  • February 23, 2021
    ACR Bulletin: Recovery Mode

    Cyber attacks have ramped up in recent years, and radiology practices must be prepared to respond decisively to potential breaches.

    American College of Radiology Website Link
  • June 27, 2019
    ACR Bulletin: Under Attack

    Radiologists must make cyber security a priority to protect their businesses and patient data.

    American College of Radiology Website Link

Current CVE’s

Current Common Vulnerabilities and Exposures (CVE) Information and Investigations for Konica Minolta Products

  • July 21, 2021

    PrintNightmare (CVE-2021-34527) – Critical Windows Print Spooler Vulnerability

    KMHA is aware of the vulnerability CVE-2021-34527, named “PrintNightmare”. Information on the PrintNightmare vulnerability can be found at the link below.

    KMHA is actively assessing products that utilize impacted Microsoft operating systems to determine possible impact. Additional information will be available upon completion of patch testing once complete.

    Please Contact the Call Center 1 (800) 945-0456 to inquire about this vulnerability and any impact to your Konica Minolta System.

    U.S. Cybersecurity & Infrastructure Security Agency (CISA) Website Link

Cybersecurity Related Alerts, News & Updates

Weekly summaries of new vulnerabilities along with patch information from CISA & US-CERT

For all CISA mailing lists and feeds see their website.

Contact Konica Minolta Healthcare Americas about Cybersecurity






















    *Required Fields








    ©2014 Konica Minolta Healthcare Americas, Inc.

    AeroDR®, AeroSync®, DRYPRO®, FlexDR®, IMAGEPILOT®, informity®, IQUE®, PrintLink®, REGIUS®, SONIMAGE®, and Xpress CR® are registered marks of Konica Minolta Healthcare Americas, Inc.

    AeroRemote™, KDR™, SKR™, SNIBLE™, SNV™, T2HI™, VIRSERBEST™, VIZION™, EXA™ and OPAL-RAD™ are registered trademarks of Konica Minolta Healthcare Americas, Inc.

    AeroDR®, AeroRemote®, AeroSync®, DRYPRO®, EXA®, IMAGEPILOT®, KDR®, OPAL-RAD®, REGIUS® SNV®, SONIMAGE®, UGPLearningHub®, UGPro® and Xpress CR® are registered marks of Konica Minolta Healthcare Americas, Inc.

    Realismand Symmetry are trademarks of Konica Minolta Healthcare Americas, Inc.