October is Cybersecurity Awareness Month

October is Cybersecurity Awareness Month. The health care industry remains one of the highest targets because of personal information exchanged.

We all play an important role in reducing the risk of cyberattacks. Cyberattacks continue to evolve and change, and phishing remains one of the most widely used tactics. Be aware of the red flags in emails such as incorrect spelling, urgency, sloppy messaging and requests for personal information.

New security enhancements in 2025

In March 2025, you’ll no longer be able to use email as an authentication method when signing in to UnitedHealthcare Hearing Provider Portal. To maintain uninterrupted access, you’ll be required to update your sign-in methods to include passkey, authenticator and/or a verified phone number.

Additional information to protect your practice’s and your patients’ information

Passwords

Review the following password best practices:

• Make them long: Password-cracking software can guess short passwords in minutes or even seconds
• Make them unique: It’s vital to protect every account and device with a unique password. Use a combination of upper and lowercase letters, numbers and special characters.
• Don’t reuse passwords: If you reuse a password and it gets stolen, someone could use it to gain access to any account with that same password.
• Use passphrases: A passphrase including a string of words that make sense only to you. Consider a quote from your favorite book or movie that is easy to remember but difficult for others to guess.
• Factor in multi-factor authentication (MFA): Provides an additional layer of security by requiring a secondary authentication method in addition to a password. This helps protect your accounts should your password get leaked or stolen.

Phishing and ransomware

A phishing email often looks like it’s from someone familiar, asking you to click on a link, open an attachment or download a file. If you click on a phishing link or file, malicious software may be installed on your device.

Social engineering 

Social engineering is the art of manipulating, influencing or deceiving you into taking some action that isn’t in the best interest of you or our organization.

• Be wary of requests that play on your emotions with a sense of urgency or that attempt to establish trust.
• Practice safe communication and account habits. For example, consider removing physical addresses and personal mobile phone numbers from your email signature