Healthcare industry leaders think there is much to learn from the Change Healthcare cyberattack, and they hope the sector can apply these lessons to prevent a hack like this from ever happening again. Overall, the chaotic aftermath of the attack underscores the dire need for a more unified approach to cybersecurity within the healthcare sector.
The aftermath the cyberattack on Change Healthcare remains messy, with patients across the country still struggling to obtain their prescriptions. The federal government has even stepped in to help address the fallout of the attack, urging payers to quickly alleviate the digital bottlenecks that providers and pharmacies are facing.
Munck Wilson Mandala Partner Greg Howison shared his perspective on some of the legal ramifications around AI, IP, connected devices and the data they generate, in response to emailed questions.
Mari Savickis, Vice President of Public Policy with CHIME, will be moderating a panel discussion as part of the Cybersecurity Pavilion at the ViVE 2024 event in Los Angeles, scheduled for February 25-28. She said her organization anticipates several developments addressing cybersecurity this year.
HHS recently published guidance outlining voluntary cybersecurity performance goals for the healthcare sector. Taylor Lehmann, a cybersecurity executive at Google Cloud, noted that "what is on HHS paper will most likely become what is in the actual final rulemaking or new regulatory requirements that become law."
Many hospitals remain underprepared to protect themselves against cybercriminals’ barrage of increasingly sophisticated attacks, but there are a couple concrete steps they can take to build a stronger defense structure — like virtual patching and thinking twice about moving to the cloud.
HHS issued an alert warning providers about Rhysida, a ransomware gang that recently begun launching attacks on healthcare organizations. The group deploys its ransomware primarily through phishing attacks or the exploitation of legitimate cybersecurity tools.
At the Abarca Forward conference earlier this year, George Van Antwerp, managing director at Deloitte, discussed how social determinants of health and a personalized member experience can improve medication adherence and health outcomes.
To prevent the proliferation of data security incidents in the healthcare industry, providers must examine their use of legacy systems as well as their reliance on third parties, according to a new report. It pointed out that most providers fail to probe their third-party partners' cybersecurity measures, and many continue to use legacy systems that are no longer supported by vendors or are hard to patch and update.
Clop, a Russian ransomware gang known for going after healthcare providers, has been recently exploiting a software vulnerability called MOVEit. Johns Hopkins University and its health system were recently victims of a data breach caused by hackers targeting this vulnerability, as was Texas-based Harris Health System.
HC3 recently warned healthcare providers about a "relatively unknown" ransomware gang named TimisoaraHackerTeam. The group leverages legitimate software tools like Microsoft’s BitLocker and Jetico’s BestCrypt to deliver its malware.
Federal officials are sounding the alarm on two ransomware groups that are actively targeting the healthcare sector: Cl0p and LockBit. In recent months, the groups have been exploiting three known software vulnerabilities in cyberattacks they have waged against healthcare businesses across the country.
We will highlight Build My Health's revenue practice management tools, which could help physician practices add up to $250,000 to their practices.
Learn how to identify bad actors from instigating cyber attacks and what stakeholders are doing at the regional and national levels to address this crisis.
The FBI, CISA and HHS have all recently issued warnings about the dangers associated with the Royal Ransomware gang. Since approximately September of last year, cybercriminals have been using a Royal ransomware variant to compromise organizations across the U.S., many of which have been healthcare providers.
David Finn, CHIME Association Executive Healthcare and Information Sector, lead of the cybersecurity pavilion initiatives at ViVE 2023, does not mince words. With ransomware attacks surging to an all time high this month, Finn said in an interview that security is no longer a defensive posture; we are engaged in a war.
Ransomware group BlackCat has been targeting healthcare organizations in recent months, and it just went after NextGen Healthcare. Healthcare organizations would be wise to enhance their cybersecurity strategy in defense against BlackCat, as it is “one of the more adaptable ransomware operations in the world,” according to HHS.
MemorialCare, Ballad Health, Cedars-Sinai and UNC REX Healthcare recently participated in Censinet’s $9 million funding round. The company’s flagship product is a cloud-based network that allows healthcare organizations to share and manage risk data to strengthen cybersecurity planning.