UPMC Emphasizes Secure Communication Protocols for Employees and Patients Amidst Rising Cyber Threats
UPMC, a non-profit healthcare provider and insurer headquartered in Pittsburgh, PA, is reinforcing its secure communication infrastructure for both employees and patients. The organization utilizes distinct platforms to manage internal operations and patient interactions, primarily Microsoft Office 365 for employees and the MyUPMC patient portal for patient-provider communication. This dual-platform approach is designed to ensure HIPAA compliance and protect sensitive health information. Employees access their UPMC email through the official Outlook Web Access (OWA) portal, requiring multi-factor authentication (MFA) to safeguard clinical data and internal communications. For patients, the MyUPMC portal serves as a secure, encrypted messaging system, allowing them to request appointments, view lab results, and communicate with their care teams without using standard, unencrypted email services. UPMC stresses that standard emails are not suitable for Protected Health Information (PHI) due to security risks.
