Healthcare providers are making cybersecurity progress, but serious vulnerabilities remain — especially when it comes to AI governance, third-party risk, and limited budgets. Fortified Health Security CEO Dan Dodson urged the industry to stop waiting for perfect conditions and act decisively to strengthen their defenses.
The bottom line is that while recognizing there is an issue is vital, too many healthcare organizations are counting on solutions that cannot and will not provide a sufficient line of defense.
CEO shares how Ambience can help reduce administrative burden.
In an interview at the Vive conference in Los Angeles, John Couris said that while he is sympathetic toward Change Healthcare's current woes, he wants definitive answers soon.
Hospitals and outpatient treatment centers in at least three states are struggling to get their systems back online following a ransomware attack waged last week against parent company Prospect Medical Holdings. Some of these facilities have partially or completely halted patient care.
The Health3PT Initiative recently released recommendations on how providers can better address the cybersecurity risks linked to their third party reliance. Some of the group’s recommendations included ensuring that contract language ties financial terms to a vendor’s data management transparency and establishing metrics and reporting requirements for organization-wide vendor risks.
HCA Healthcare recently suffered a data breach affecting 1,038 hospitals and physician clinics across 20 states. The health system said hackers stole data from an external data storage location "exclusively used to automate the formatting of email messages." It also said that the incident has not caused any disruption to HCA's daily operations or the services it provides to patients.
Jeff Bak shares what is needed in making healthcare more affordable and sustainable for employees.
Clop, a Russian ransomware gang known for going after healthcare providers, has been recently exploiting a software vulnerability called MOVEit. Johns Hopkins University and its health system were recently victims of a data breach caused by hackers targeting this vulnerability, as was Texas-based Harris Health System.
HC3 recently warned healthcare providers about a "relatively unknown" ransomware gang named TimisoaraHackerTeam. The group leverages legitimate software tools like Microsoft’s BitLocker and Jetico’s BestCrypt to deliver its malware.
A group of federal agencies recently released an updated set of guidelines to help healthcare organizations protect themselves from ransomware attacks and the data breaches that often follow. The guidance lays out best practices to prevent the six major ways that bad actors gain access to providers’ systems, which include compromised credentials and phishing.
Federal officials are sounding the alarm on two ransomware groups that are actively targeting the healthcare sector: Cl0p and LockBit. In recent months, the groups have been exploiting three known software vulnerabilities in cyberattacks they have waged against healthcare businesses across the country.
Greenway Health blends smart technology with human expertise to elevate revenue cycle.
Cerebral recently notified 3.1 million of its users that their private health information was shared with tech companies like Meta, Google and TikTok. The data breach stemmed from Cerebral's use of pixel tracking technology, which the company said has been discontinued or reconfigured.
Ransomware group BlackCat has been targeting healthcare organizations in recent months, and it just went after NextGen Healthcare. Healthcare organizations would be wise to enhance their cybersecurity strategy in defense against BlackCat, as it is “one of the more adaptable ransomware operations in the world,” according to HHS.
CommonSpirit Health is facing a proposed class-action lawsuit over a ransomware attack it suffered last fall that exposed 623,774 patients' personal data. However, hospitals' data breach lawsuits usually never make it court, a legal expert said.
In 2022, the healthcare sector is on track to meet or exceed the more than 50.4 million patient records that were breached last year. As we look ahead to 2023, increasing cybersecurity budgets will be a necessity for healthcare organizations, despite their tight financial circumstances.
While you may rid yourself of one attacker by meeting their demands, you send a sign to threat actors around the world that you are willing to negotiate.