HHS issued an alert warning providers about Rhysida, a ransomware gang that recently begun launching attacks on healthcare organizations. The group deploys its ransomware primarily through phishing attacks or the exploitation of legitimate cybersecurity tools.
Federal officials are sounding the alarm on two ransomware groups that are actively targeting the healthcare sector: Cl0p and LockBit. In recent months, the groups have been exploiting three known software vulnerabilities in cyberattacks they have waged against healthcare businesses across the country.
The Health Sector Cybersecurity Coordination Center (HC3) recently issued a report letting healthcare organizations know that they are still being heavily targeted by KillNet, a Russian group of cybercriminals. The number of daily attacks KillNet waged against healthcare organizations using Microsoft Azure increased significantly between November 18 and February 17 — from 10-20 attacks per day in November to 40-60 attacks per day in February.
Russian hacker group Killnet has claimed responsibility for a string of recent cyberattacks that took more than a dozen hospital websites offline across the U.S. — including the websites for Cedars-Sinai, Michigan Medicine, and UPMC. The group has been active for at least a year and is known to target countries that support and/or send resources to Ukraine.
In 2022, the healthcare sector is on track to meet or exceed the more than 50.4 million patient records that were breached last year. As we look ahead to 2023, increasing cybersecurity budgets will be a necessity for healthcare organizations, despite their tight financial circumstances.
Cybercriminals are weaponizing the same tools that healthcare providers use to operate and maintain secure IT systems, HHS warned in a recent report. Providers can protect themselves by having a firm grasp of what their IT environment looks like, as this may help them spot any suspicious security tool commands.
A specialty drug is a class of prescription medications used to treat complex, chronic or rare medical conditions. Although this classification was originally intended to define the treatment of rare, also termed “orphan” diseases, affecting fewer than 200,000 people in the US, more recently, specialty drugs have emerged as the cornerstone of treatment for chronic and complex diseases such as cancer, autoimmune conditions, diabetes, hepatitis C, and HIV/AIDS.
The model can be used to outline the steps involved in a ransomware attack and thereby enabling healthcare providers to block the attackers themselves at each step.
Cybersecurity will continue to be a major issue for providers in the year ahead. According to CareJourney President Aneesh Chopra, the most common factors putting providers at risk are their employees and being unable to track data flow.
In 2014, Martin Gottesfeld, who identified himself as a member of Anonymous, carried out cyberattacks on Boston Children's Hospital and Wayside Youth & Family Support Network.
New research from Symantec found 39 percent of Orangeworm's victims operate in the healthcare field. Its other targeted sectors like manufacturing have ties to the medical industry as well.
Munck Wilson Mandala Partner Greg Howison shared his perspective on some of the legal ramifications around AI, IP, connected devices and the data they generate, in response to emailed questions.
Instead of examining cybersecurity from the perspective of IT experts, the Nuix "Black Report" survey got inside the minds of hackers.
Parsons, Tennessee-based Decatur County General Hospital has notified patients of a breach in which a hacker remotely installed unauthorized software on its EHR system. The hospital doesn't believe any patient data was accessed.
The latest Breach Barometer from Protenus found there were 33 breach incidents in August. While 54.5 percent of them were due to hacking, 27.3 percent were caused by insiders.
During a speech at the American Hospital Association Annual Membership Meeting, FBI Director James Comey encouraged hospitals to reach out to his agency for help and avoid paying ransom.
A new report from Protenus found that of the 31 data breach incidents in February, 58 percent were attributable to insiders while only 13 percent were due to hacking.
