Stop Treating Patches Like They’re Riskier Than Ransomware
We’re losing the patching battle and therefore the ransomware war. Here's how healthcare can change its perspective, improve patching, and better block ransomware pathways.
We’re losing the patching battle and therefore the ransomware war. Here's how healthcare can change its perspective, improve patching, and better block ransomware pathways.
Across the U.S., nearly 700 rural hospitals are at risk of closure. When they shut down, the impacts cascade: broken continuity, delayed care, and increased cyber risk in every new system a patient must navigate.
Recognizing its vulnerability to cybercrime, the healthcare industry continues to prioritize cybersecurity. Here are some areas where organizations should be focusing their efforts.
U.S. healthcare organizations lose $1.9 million on average during each day of downtime following a ransomware attack, according to new research from Comparitech. Rebecca Moody, Comparitech’s head of data research, predicted that the rate of ransomware attacks in the healthcare sector will accelerate even more in 2025.
Ascension’s May cyberattack compromised 5.6 million patients’ personal and health information, including Social Security numbers, credit card numbers and addresses. However, there is no evidence that any data was stolen from Acension’s EHR or other clinical systems, the health system said.
Healthcare organizations can significantly improve their resilience against ransomware attacks by implementing proactive protection, continuous monitoring, and rapid recovery strategies. Proactive protection, continuous monitoring, and rapid recovery strategies are key.
A proactive cybersecurity stance can maintain the integrity of healthcare, ensuring that care remains both continuous and secure.
Increasing costs and healthcare cybersecurity worries have sparked calls for new laws. The bipartisan “Strengthening Cybersecurity in Health Care Act” by four senators would require the HHS to perform routine evaluations of its systems and deliver biannual reports on practices and progress.
HHS issued an alert warning providers about Rhysida, a ransomware gang that recently begun launching attacks on healthcare organizations. The group deploys its ransomware primarily through phishing attacks or the exploitation of legitimate cybersecurity tools.
Hospitals and outpatient treatment centers in at least three states are struggling to get their systems back online following a ransomware attack waged last week against parent company Prospect Medical Holdings. Some of these facilities have partially or completely halted patient care.
In a landscape where complexity has long been the norm, the power of one lies not just in unification, but in intelligence and automation.
HC3 recently warned healthcare providers about a "relatively unknown" ransomware gang named TimisoaraHackerTeam. The group leverages legitimate software tools like Microsoft’s BitLocker and Jetico’s BestCrypt to deliver its malware.
A group of federal agencies recently released an updated set of guidelines to help healthcare organizations protect themselves from ransomware attacks and the data breaches that often follow. The guidance lays out best practices to prevent the six major ways that bad actors gain access to providers’ systems, which include compromised credentials and phishing.
Ransomware group BlackCat has been targeting healthcare organizations in recent months, and it just went after NextGen Healthcare. Healthcare organizations would be wise to enhance their cybersecurity strategy in defense against BlackCat, as it is “one of the more adaptable ransomware operations in the world,” according to HHS.
CommonSpirit Health is facing a proposed class-action lawsuit over a ransomware attack it suffered last fall that exposed 623,774 patients' personal data. However, hospitals' data breach lawsuits usually never make it court, a legal expert said.
The Santa Clara, California company uses both machine learning and an advanced method of examining and managing network traffic, to secure connected devices and bring order in a world of IT chaos.