Cyber-analytics: Modeling factors associated with healthcare data breaches

Abstract

The purpose of this study was to develop a model of factors associated with healthcare data breaches. Variables were operationalized as the healthcare facilities' level of exposure, level of security, and organizational factors. The outcome variable was the binary value for data breach/no data breach. Because healthcare data breaches carry the risk of personal health information exposure, corruption or destruction, this study is important to the healthcare field. Data were obtained from the Department of Health and Human Services database of healthcare facilities reporting data breaches and from a large national database of technical and organizational infrastructure information. Binary logistic regression was utilized to examine a representative data breach model. Results indicate several exposure, security and organizational factors significantly associated with healthcare data breaches.