{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T18:20:31Z","timestamp":1789496431295,"version":"build-2803163510"},"reference-count":51,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2018,11,28]],"date-time":"2018-11-28T00:00:00Z","timestamp":1543363200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Med Syst"],"published-print":{"date-parts":[[2019,1]]},"DOI":"10.1007\/s10916-018-1123-2","type":"journal-article","created":{"date-parts":[[2018,11,28]],"date-time":"2018-11-28T00:38:29Z","timestamp":1543365509000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":99,"title":["Healthcare Data Breaches: Implications for Digital Forensic Readiness"],"prefix":"10.1007","volume":"43","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3302-4530","authenticated-orcid":false,"given":"Maxim","family":"Chernyshev","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sherali","family":"Zeadally","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zubair","family":"Baig","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,11,28]]},"reference":[{"issue":"1","key":"1123_CR1","doi-asserted-by":"crossref","first-page":"50","DOI":"10.7861\/futurehosp.15.015","volume":"2","author":"KM Cresswell","year":"2015","unstructured":"Cresswell, K. M., and Sheikh, A., Health information technology in hospitals: current issues and future trends. Future Hospital Journal 2(1):50\u201356, 2015.","journal-title":"Future Hospital Journal"},{"issue":"21","key":"1123_CR2","doi-asserted-by":"publisher","first-page":"2696","DOI":"10.1016\/j.jacc.2017.10.018","volume":"70","author":"SP Bhavnani","year":"2017","unstructured":"Bhavnani, S. P., Parakh, K., Atreja, A., Druz, R., Graham, G. N., Hayek, S. S., Krumholz, H. M., Maddox, T. M., Majmudar, M. D., Rumsfeld, J. S., and Shah, B. R., 2017 Roadmap for Innovation\u2014ACC Health Policy Statement on Healthcare Transformation in the Era of Digital Health, Big Data, and Precision Health: A Report of the American College of Cardiology Task Force on Health Policy Statements and Systems of Care. Journal of the American College of Cardiology 70(21):2696\u20132718, 2017. \n                    https:\/\/doi.org\/10.1016\/j.jacc.2017.10.018\n                    \n                  .","journal-title":"Journal of the American College of Cardiology"},{"key":"1123_CR3","unstructured":"Trustwave, The value of data: a cheap commodity or a priceless asset, 2017."},{"key":"1123_CR4","doi-asserted-by":"publisher","first-page":"678","DOI":"10.1109\/ACCESS.2015.2437951","volume":"3","author":"SR Islam","year":"2015","unstructured":"Islam, S. R., Kwak, D., Kabir, M. H., Hossain, M., and Kwak, K.-S., The internet of things for health care: a comprehensive survey. IEEE Access 3:678\u2013708, 2015.","journal-title":"IEEE Access"},{"key":"1123_CR5","unstructured":"Verizon, Protected health information data breach report, 2018."},{"key":"1123_CR6","unstructured":"U.S. Department of Health & Human Services (HHS), The HIPAA privacy rule. \n                    https:\/\/www.hhs.gov\/hipaa\/for-professionals\/privacy\/index.html\n                    \n                  . Accessed 8 April 2018."},{"key":"1123_CR7","unstructured":"Information Commissioner\u2019s Office (ICO), Data Protection Bill 2017. \n                    https:\/\/ico.org.uk\/for-organisations\/data-protection-bill\/\n                    \n                  . Accessed 8 April 2018."},{"key":"1123_CR8","unstructured":"European Union (EU), Home Page of EU GDPR. \n                    https:\/\/www.eugdpr.org\/\n                    \n                  . Accessed 8 April 2018."},{"key":"1123_CR9","unstructured":"Office of the Australian Information Commissioner (OAIC), Privacy Act. \n                    https:\/\/www.oaic.gov.au\/privacy-law\/privacy-act\/\n                    \n                  . Accessed 8 April 2018."},{"key":"1123_CR10","unstructured":"Office of the Australian Information Commissioner (OAIC), Notifiable data breaches scheme. \n                    https:\/\/www.oaic.gov.au\/privacy-law\/privacy-act\/notifiable-data-breaches-scheme\n                    \n                  . Accessed 8 April 2018."},{"key":"1123_CR11","unstructured":"Singapore Personal Data Protection Commission, Personal data protection act overview. \n                    https:\/\/www.pdpc.gov.sg\/Legislation-and-Guidelines\/Personal-Data-Protection-Act-Overview\n                    \n                  . Accessed 8 April 2018."},{"key":"1123_CR12","unstructured":"Office of the Privacy Commissioner of Canada, The Personal information protection and electronic documents act (PIPEDA). \n                    https:\/\/www.priv.gc.ca\/en\/privacy-topics\/privacy-laws-in-canada\/the-personal-information-protection-and-electronic-documents-act-pipeda\/\n                    \n                  . Accessed 8 April 2018."},{"key":"1123_CR13","unstructured":"Japan Personal Information Protection Commission. Act on the Protection of Personal Information Act No. 57 of (2003), 2005."},{"key":"1123_CR14","unstructured":"U.S. Department of Health & Human Services (HHS). Breach Portal: notice to the secretary of HHS breach of unsecured protected health information. \n                    https:\/\/ocrportal.hhs.gov\/ocr\/breach\/breach_report.jsf\n                    \n                  . Accessed 7 April 2018."},{"key":"1123_CR15","doi-asserted-by":"crossref","unstructured":"Blum, B. I., Orthner, H. F., Implementing health care information systems. In: Implementing Health Care Information Systems. Springer, pp 3\u201321, 1989.","DOI":"10.1007\/978-1-4612-3488-3_1"},{"key":"1123_CR16","unstructured":"Medical Identity Fraud Alliance (MIFA), The growing threat of medical identity fraud: a call to action, 2013."},{"key":"1123_CR17","doi-asserted-by":"crossref","unstructured":"Czeschik C (2018) Black Market Value of Patient Data. In: Claudia Linnhoff-Popien RS, Michael Zaddach (ed) Digital Marketplaces Unleashed. Springer-Verlag. 10.1007\/978-3-662-49275-8_78","DOI":"10.1007\/978-3-662-49275-8_78"},{"key":"1123_CR18","unstructured":"Dissent, D., 655,000 patient records for sale on the dark net after hacking victims refuse extortion demands. The Daily Dot. \n                    https:\/\/www.dailydot.com\/layer8\/655000-patient-records-dark-net\/\n                    \n                  . Accessed 21 April 2018."},{"key":"1123_CR19","unstructured":"Bitglass, Healthcare breach report 2018: Security Procedures Thwart Attacks, 2018."},{"key":"1123_CR20","unstructured":"Moffit, R. E., Health care data breaches: a changing landscape, 2017."},{"key":"1123_CR21","unstructured":"Office of the Australian Information Commissioner (OAIC), Notifiable Data Breaches - Quarterly Statistics Report: January 2018\u2013March 2018., 2018."},{"key":"1123_CR22","unstructured":"VERIS Community Database (VCDB) Project. The VERIS Community Database (VCDB). \n                    http:\/\/veriscommunity.net\/vcdb.html\n                    \n                  , 2018."},{"key":"1123_CR23","unstructured":"Verizon. Protected health information data breach report, 2015."},{"key":"1123_CR24","unstructured":"Federal Bureau of Investigation (FBI). Table 16 property stolen and recovered. \n                    https:\/\/ucr.fbi.gov\/crime-in-the-u.s\/2016\/crime-in-the-u.s.-2016\/topic-pages\/tables\/table-16\n                    \n                  . Accessed 22 April 2018."},{"key":"1123_CR25","unstructured":"Palmer, G., A road map for digital forensic research. In: First Digital Forensic Research Workshop, Utica, pp 27\u201330, 2001."},{"key":"1123_CR26","unstructured":"Baryamureeba, V., and Tushabe F., The enhanced digital investigation process model. In, 2004."},{"key":"1123_CR27","unstructured":"Carrier, B., Spafford EH An event-based digital forensic investigation framework. In: Digital forensic research workshop, 2004."},{"key":"1123_CR28","doi-asserted-by":"crossref","unstructured":"Cohen, F., Toward a Science of Digital Forensic Evidence Examination. In Advances in Digital Forensics VI. Springer Berlin Heidelberg, pp 17\u201335, 2010.","DOI":"10.1007\/978-3-642-15506-2_2"},{"key":"1123_CR29","doi-asserted-by":"publisher","first-page":"103","DOI":"10.1016\/j.cose.2013.05.001","volume":"38","author":"MD Kohn","year":"2013","unstructured":"Kohn, M. D., Eloff, M. M., and Eloff, J. H. P., Integrated digital forensic process model. Comput Secur 38:103\u2013115, 2013. \n                    https:\/\/doi.org\/10.1016\/j.cose.2013.05.001\n                    \n                  .","journal-title":"Comput Secur"},{"key":"1123_CR30","first-page":"1","volume-title":"Forensic readiness","author":"J Tan","year":"2001","unstructured":"Tan, J., Forensic readiness. Cambridge: @ Stake, 2001, 1\u201323."},{"key":"1123_CR31","unstructured":"Sachowski, J., Implementing Digital Forensic Readiness: From Reactive to Proactive Process. 1st edn. Syngress, 2016."},{"issue":"12","key":"1123_CR32","doi-asserted-by":"publisher","first-page":"36","DOI":"10.1109\/MC.2012.252","volume":"45","author":"R Hunt","year":"2012","unstructured":"Hunt, R., and Zeadally, S., Network Forensics: An Analysis of Techniques, Tools, and Trends. Computer 45(12):36\u201343, 2012. \n                    https:\/\/doi.org\/10.1109\/MC.2012.252\n                    \n                  .","journal-title":"Computer"},{"issue":"1","key":"1123_CR33","doi-asserted-by":"publisher","first-page":"7","DOI":"10.1145\/2906149","volume":"49","author":"S Khan","year":"2016","unstructured":"Khan, S., Gani, A., Wahab, A. W. A., Bagiwa, M. A., Shiraz, M., Khan, S. U., Buyya, R., and Zomaya, A. Y., Cloud log forensics: Foundations, state of the art, and future directions. ACM Computing Surveys (CSUR) 49(1):7, 2016.","journal-title":"ACM Computing Surveys (CSUR)"},{"key":"1123_CR34","doi-asserted-by":"crossref","unstructured":"Jiang, J., Chen, J., Choo, K.-K. R., Liu, C., Liu, K., Yu, M., A Visualization Scheme for Network Forensics Based on Attribute Oriented Induction Based Frequent Item Mining and Hyper Graph. In Digital Forensics and Cyber Crime. Cham: Springer International Publishing, pp 130\u2013143, 2018.","DOI":"10.1007\/978-3-319-73697-6_10"},{"key":"1123_CR35","doi-asserted-by":"crossref","unstructured":"MacRae, J., and Franqueira V. N., On Locky Ransomware, Al Capone and Brexit. In: International Conference on Digital Forensics and Cyber Crime, Springer, pp 33\u201345, 2017.","DOI":"10.1007\/978-3-319-73697-6_3"},{"key":"1123_CR36","unstructured":"BitCluster, BitCluster. \n                    https:\/\/www.bit-cluster.com\n                    \n                  . Accessed 28 April 2018."},{"key":"1123_CR37","unstructured":"Elliptic, Elliptic. \n                    https:\/\/www.elliptic.co\/what-we-do\/bitcoin-forensics\n                    \n                  . Accessed 28 April 2018."},{"key":"1123_CR38","unstructured":"Vargas, J., Bahnsen, A. C., and Villegas, S., Ingevaldson D Knowing your enemies: Leveraging data analysis to expose phishing patterns against a major US financial institution. In: Electronic Crime Research (eCrime), 2016 APWG Symposium on. IEEE, pp 1\u201310, 2016."},{"key":"1123_CR39","doi-asserted-by":"crossref","unstructured":"Hamid, I. R. A., Samsudin, N. A., Mustapha, A., and Arbaiy, N., Dynamic Trackback Strategy for Email-Born Phishing Using Maximum Dependency Algorithm (MDA). In Recent Advances on Soft Computing and Data Mining. Cham: Springer International Publishing, pp 263\u2013273, 2017.","DOI":"10.1007\/978-3-319-51281-5_27"},{"issue":"12","key":"1123_CR40","doi-asserted-by":"publisher","first-page":"3629","DOI":"10.1007\/s00521-016-2275-y","volume":"28","author":"BB Gupta","year":"2017","unstructured":"Gupta, B. B., Tewari, A., Jain, A. K., and Agrawal, D. P., Fighting against phishing attacks: state of the art and future challenges. Neural Computing and Applications 28(12):3629\u20133654, 2017. \n                    https:\/\/doi.org\/10.1007\/s00521-016-2275-y\n                    \n                  .","journal-title":"Neural Computing and Applications"},{"key":"1123_CR41","unstructured":"Jayabalan, M., and Daniel T., Continuous and Transparent Access Control Framework for Electronic Health Records: A Preliminary Study. In: International Conference on Information Technology on Information Technology, Information Systems, and Electrical Engineering (ICITISEE 2017), 2017."},{"key":"1123_CR42","doi-asserted-by":"publisher","first-page":"283","DOI":"10.1016\/j.asoc.2015.07.018","volume":"36","author":"I Kose","year":"2015","unstructured":"Kose, I., Gokturk, M., and Kilic, K., An interactive machine-learning-based electronic fraud and abuse detection system in healthcare insurance. Applied Soft Computing 36:283\u2013299, 2015.","journal-title":"Applied Soft Computing"},{"issue":"5","key":"1123_CR43","doi-asserted-by":"publisher","first-page":"2684","DOI":"10.1007\/s10664-016-9449-1","volume":"22","author":"J King","year":"2017","unstructured":"King, J., Stallings, J., Riaz, M., and Williams, L., To log, or not to log: using heuristics to identify mandatory log events \u2013 a controlled experiment. Empirical Software Engineering 22(5):2684\u20132717, 2017. \n                    https:\/\/doi.org\/10.1007\/s10664-016-9449-1\n                    \n                  .","journal-title":"Empirical Software Engineering"},{"key":"1123_CR44","unstructured":"Protenus, Getting Schooled on Patient Privacy Analytics. \n                    https:\/\/blog.protenus.com\/getting-schooled-on-patient-privacy-analytics\n                    \n                  . Accessed 3 May 2018."},{"key":"1123_CR45","unstructured":"Cognetyx, The inconvenient truth about patient data security and privacy in healthcare. \n                    https:\/\/www.cognetyx.com\/the-inconvenient-truth-about-patient-data-security-and-privacy-in-healthcare-cognetyxs-new-ambient-cognitive-cyber-surveillance-solution-is-addressing-this-proble\/\n                    \n                  . Accessed 3 May 2018."},{"key":"1123_CR46","unstructured":"Zawoad, S., Dutta, A. K., and Hasan R., SecLaaS: secure logging-as-a-service for cloud forensics. In: Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security. ACM, pp 219\u2013230, 2013."},{"key":"1123_CR47","unstructured":"Nanda, S., Hansen, R. A., Forensics as a Service: Three-tier Architecture for Cloud based Forensic Analysis. In: Parallel and Distributed Computing (ISPDC), 2016 15th International Symposium on, 2016. IEEE, pp 178\u2013183"},{"key":"1123_CR48","unstructured":"Zawoad, S., and Hasan, R., Faiot: Towards building a forensics aware eco system for the internet of things. In: Services Computing (SCC), 2015 IEEE International Conference on. IEEE, pp 279\u2013284, 2015."},{"key":"1123_CR49","unstructured":"Raju, B. K., Moharil, B., Geethakumari G FaaSeC: Enabling Forensics-as-a-Service for Cloud Computing Systems. In: 2016 IEEE\/ACM 9th International Conference on Utility and Cloud Computing (UCC). pp 220\u2013227, 2016."},{"key":"1123_CR50","doi-asserted-by":"publisher","first-page":"S30","DOI":"10.1016\/j.jbi.2015.06.015","volume":"58","author":"H Yang","year":"2015","unstructured":"Yang, H., and Garibaldi, J. M., Automatic detection of protected health information from clinic narratives. Journal of Biomedical Informatics 58:S30\u2013S38, 2015. \n                    https:\/\/doi.org\/10.1016\/j.jbi.2015.06.015\n                    \n                  .","journal-title":"Journal of Biomedical Informatics"},{"issue":"4","key":"1123_CR51","doi-asserted-by":"publisher","first-page":"227","DOI":"10.1016\/j.istr.2013.02.003","volume":"17","author":"P Fr\u00fchwirt","year":"2013","unstructured":"Fr\u00fchwirt, P., Kieseberg, P., Schrittwieser, S., Huber, M., and Weippl, E., InnoDB database forensics: Enhanced reconstruction of data manipulation queries from redo logs. Information Security Technical Report 17(4):227\u2013238, 2013.","journal-title":"Information Security Technical Report"}],"container-title":["Journal of Medical Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10916-018-1123-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10916-018-1123-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10916-018-1123-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,11,27]],"date-time":"2019-11-27T19:09:48Z","timestamp":1574881788000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10916-018-1123-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,11,28]]},"references-count":51,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2019,1]]}},"alternative-id":["1123"],"URL":"https:\/\/doi.org\/10.1007\/s10916-018-1123-2","relation":{},"ISSN":["0148-5598","1573-689X"],"issn-type":[{"value":"0148-5598","type":"print"},{"value":"1573-689X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,11,28]]},"assertion":[{"value":"12 June 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 November 2018","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"28 November 2018","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with Ethical Standards"}},{"value":"The authors declare that they have no conflict of interest.Ethical approval.This article does not contain any studies with human participants or animals performed by any of the authors.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"7"}}