Ransomware Impacts
FBI IC3: Healthcare Sector Faced Most Ransomware Attacks Last Year
Health IT Security, March 24, 2022
The healthcare sector fell victim to ransomware far more than any other critical infrastructure sector last year, the FBI’s 2021 Internet Crime Report found.
Health-ISAC calls for ‘intelligence-led’ security, as actors continue to target healthcare
SC Media, March 24, 2022
Healthcare security leaders must adopt better communication tactics for obtaining financial investments and building cyber resilience through an “intelligence-led information security program,” using threat intel to impart risks to the board, such as the new cyber threat report from Health-ISAC, according to its chief security officer.
2 Latest Health Data Hacks Affect Over 200,000 Individuals
Gov Info Security, March 23, 2022
A public health department in Washington state and a medical specialty practice in New Jersey are among the latest healthcare entities reporting major hacking incidents affecting tens of thousands of individuals’ sensitive health information.
Ransomware strikes Scottish mental health charity
IT Pro, March 21, 2022
The RansomEXX cyber criminals have claimed responsibility for the hack which led to more than 12GB of sensitive data being leaked to the dark web.
The Scottish Association for Mental Health (SAMH) has confirmed that it has fallen victim to a ransomware attack that has affected its IT systems, including email and some phone lines.
HHS: Amid Russian threat, hospitals need 4-6 week business continuity plan
SC Media, March 21, 2022
Echoing recent healthcare industry stakeholder groups, the Department of Health and Human Services is urging provider organizations to review and bolster defenses to guard against possible fallout from the Russian invasion of Ukraine. As a general rule, business continuity plans should cover between four to six weeks of continuity in the wake of an attack.
Scottish mental health charity “devastated” by heartless RansomEXX ransomware attack
Bitdefender, March 21, 2022
Scottish mental health charity SAMH has announced that it has been left “devastated” by a ransomware attack that has seen personal information spilled out onto the net.
SAMH (the Scottish Association for Mental Health) helps provide care and support for adults and young people suffering from issues with their mental health, and campaigns to influence positive social change.
President Biden Signs into Law the Cyber Incident Reporting Act, Imposing Reporting Requirements for Cyber Incidents and Ransomware Payments
National Law Review, March 18, 2022
On March 15, 2022, President Biden signed into law the 2022 Consolidated Appropriations Act containing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (the “Cyber Incident Reporting Act”).
HHS: Health Sector Should Prepare for Russia-Ukraine Threats
Gov Info Security, March 18, 2022
Federal authorities are advising healthcare sector entities to take precautions, including enhancing their cybersecurity posture and being prepared to implement four- to six-week business continuity plans, as they continue to face potential cyber incidents related to the Russia-Ukraine war.
South Denver Cardiology cyberattack, data access impacts 287K patients
SC Media, March 18, 2022
South Denver Cardiology Associates recently notified 287,652 patients that their protected health information was accessed ahead of a cyberattack deployed in January this year.
Healthcare organizations now must report cyberattacks to DHS
Becker’s Health IT, March 17, 2022
Healthcare organizations will be required to report any cyberattacks to the Department of Homeland Security, under a law signed March 15 by President Joe Biden, Bloomberg reported March 16.
HHS: HIPAA can ‘substantially mitigate’ most common healthcare cyberattacks
SC Media, March 17, 2022
The bulk of cyberattacks against the healthcare sector could be “prevented or substantially mitigated” by following the Health Insurance Portability and Accountability Act Security Rule, according to the Department of Health and Human Services Office for Civil Rights.
These four types of ransomware make up nearly three-quarters of reported incidents
ZD Net, March 17, 2022
Ransomware causes problems no matter what brand it is, but some forms are noticeably more prolific than others, with four strains of the malware accounting for a combined total of almost 70% of all attacks.
Approved for Public Release; Distribution Unlimited. Public Release Case Number 21-xxxx.