Healthcare Gets A Shot In The Arm From Cybersecurity Toolkit

Healthcare Gets A Shot In The Arm From Cybersecurity Toolkit

January 17, 2024

The Healthcare and Public Health (HPH) industry has long been a target for cybercrime. In particular, hospitals continue to be crippled by ransomware attacks. With patient lives and health services at risk, help with these devastating attacks has been desperately needed. And now, that help has arrived with a cybersecurity “toolkit.”

The Biden administration created the toolkit in partnership with Health and Human Services (HHS) and the Cybersecurity and Infrastructure Security Agency (CISA). It’s a multi-pronged strategy for HPH organizations by offering resources, training and information, and practical expertise on cybersecurity. According to the CISA website, collaboration, sharing information and staying informed are what this toolkit is all about.

A Peek at The Toolkit

Those in the HPH industry are best served going directly to the CISA website for details on best cybersecurity practices. Since prevention is foremost avoiding cyberattacks, the toolkit website recommends HPH organizations use the following steps.

OBSERVE the activity
ACT by taking local steps to mitigate the threat
REPORT the event

As long as hospital services, providers, and their computer systems are forced to shut down during and after attacks, patient care and lives stay at risk. The bullseye on healthcare, especially with ransomware attacks, exists because the threats to patient lives often translate to quick ransom payments. This cybersecurity toolkit is a great resource helping HPH providers and the industry at large keep the focus on what’s most important – patient health and information security.

Corporate Security

A PHI Security Epidemic! Healthcare Ransomware Attacks Threat To Patients

It’s no secret that in the U.S., cybercriminals placed a bullseye on healthcare systems and the sensitive patient data they hold. A recent study from the Journal of the American Medical Association (JAMA) shows over a five-year period, nearly 42 million patients had their PHI (Protected Health Information) compromised by ransomware attacks. This previously unprecedented number of victims makes PHI security more important now than ever before. READ FULL STORY

Corporate Security

Increasing Ransomware Attacks By State-Backed North Korean Hackers

State-backed North Korean hackers have long been implicated in ransomware attacks targeting healthcare facilities and critical infrastructure. South Korean and U.S. cybersecurity and intelligence agencies have jointly issued a statement claiming the monies generated by this illegal activity by North Korea are used to fund illicit activities and further the objectives of North Korea. And a recent warning has been issued that claims U.S. government departments are actively in the hacker’s bullseye. READ FULL STORY

Identity Theft

Several California Healthcare Provider Groups Suffer Serious Data Breaches

A number of Californian healthcare providers have recently fallen victim to a spate of ransomware attacks. The attacks targeted data within the Heritage Provider Network which includes Regal Medical Group, Lakeside Medical Organization, Greater Covina Medical, and the ADOC Medical Group. These organizations had collectively issued a notice of data breach at the beginning of February 2023. The notice concerned a data breach that had occurred on December 1, 2022. READ FULL STORY

Scams & Phishing

WastedLocker Ransomware Sneaks In And Out, Bypasses Detection

A very public attack on Garmin navigation systems alerted the cybersecurity community to a new ransomware created by one of the most successful and prolific attack groups in the world. The U.S. Treasury Department even officially sanctioned the group last year, blaming it for some of the worst hacking and bank fraud schemes over the past decade. Recently, it was found that the ransomware created by this group can enter and exit a data system entirely undetected. READ FULL STORY

Identity Theft

Hackers Threaten Healthcare Co. With Pay Ransom Or Customer Medical Data Goes Public

A “pay up or else” threat was recently leveled against a healthcare company, something every business hopes won’t ever happen to them. Hackers claim they have sensitive customer health data belonging to customers of Medibank, Australia’s largest healthcare insurer. Healthcare providers worldwide should pay close attention to this ransomware threat since we know it’s only a matter of time before we see similar attacks here in the U.S. Sophos’ “State of Ransomware in Healthcare” report finds 66% of healthcare organizations say they were hit by ransomware in 2021. READ FULL STORY

Email Address

Create a new Verification Phrase Enter any word or words you like.
The email newsletter will arrive from news@stickleyonsecurity.com Please wait...