Healthcare industry leaders think there is much to learn from the Change Healthcare cyberattack, and they hope the sector can apply these lessons to prevent a hack like this from ever happening again. Overall, the chaotic aftermath of the attack underscores the dire need for a more unified approach to cybersecurity within the healthcare sector.
After a healthcare cyberattack, the impacted organization often doesn't want to divulge a lot of information, Intermountain Health CISO Erik Decker said last week at HIMSS. However, he thinks healthcare organizations should be more transparent with their peers after an attack because "no one system operates independent of everybody else."
Munck Wilson Mandala Partner Greg Howison shared his perspective on some of the legal ramifications around AI, IP, connected devices and the data they generate, in response to emailed questions.
The aftermath the cyberattack on Change Healthcare remains messy, with patients across the country still struggling to obtain their prescriptions. The federal government has even stepped in to help address the fallout of the attack, urging payers to quickly alleviate the digital bottlenecks that providers and pharmacies are facing.
Pharmacies across the country are facing disruptions following a cyberattack on Change Healthcare — which is owned by Optum, a subsidiary of UnitedHealth Group. In a filing with the SEC, UnitedHealth stated that the unauthorized party that gained access to Change Healthcare's systems was a “suspected nation-state associated cyber security threat actor."
HHS issued an alert warning providers about Rhysida, a ransomware gang that recently begun launching attacks on healthcare organizations. The group deploys its ransomware primarily through phishing attacks or the exploitation of legitimate cybersecurity tools.
Hospitals and outpatient treatment centers in at least three states are struggling to get their systems back online following a ransomware attack waged last week against parent company Prospect Medical Holdings. Some of these facilities have partially or completely halted patient care.
At the Abarca Forward conference earlier this year, George Van Antwerp, managing director at Deloitte, discussed how social determinants of health and a personalized member experience can improve medication adherence and health outcomes.
HC3 recently warned healthcare providers about a "relatively unknown" ransomware gang named TimisoaraHackerTeam. The group leverages legitimate software tools like Microsoft’s BitLocker and Jetico’s BestCrypt to deliver its malware.
As companies review their processes, below are three approaches they can keep top of mind — namely, increasing employee training and utilizing technology as safeguards, making a point to learn and change processes following attacks, and prioritizing vetting partners’ security.
Russian hacker group Killnet has claimed responsibility for a string of recent cyberattacks that took more than a dozen hospital websites offline across the U.S. — including the websites for Cedars-Sinai, Michigan Medicine, and UPMC. The group has been active for at least a year and is known to target countries that support and/or send resources to Ukraine.
A new report that showed a sharp increase in cybersecurity attacks in 2021 urged organizations to consider when, not if, they too will be under attack. Attacks are becoming more sophisticated and socially engineered making them harder to detect.
We will highlight Build My Health's revenue practice management tools, which could help physician practices add up to $250,000 to their practices.
The 2021 HIMSS Healthcare Cybersecurity Survey found heathcare cyber attacks most frequently targeted financial information; aging infrastructures and tight budgets contributed to security challenges.
There is a lot of discussion on how ransomware costs healthcare billions of dollars and not enough discussion on how it impacts the patient’s safety.
This new type of ransomware — which was linked to a cyberattack against an Ohio-based health system in August — employs a multi-pronged approach, focusing not only on encrypting sensitive data but also on terminating backup processes to make it harder for organizations to recover from the attack.
Scripps Health fell victim to a ransomware attack in early May, as a result of which data of around 147,000 patients was stolen. Now, those patients are filing lawsuits against the health system alleging it failed to adequately protect their data and exposed them to several risks, including identity theft.
A third of healthcare organizations reported being victims of a ransomware attack in 2020, according to the results of a global survey. Of these, a majority (65%) said their data was encrypted by cybercriminals in the most significant attack they faced.