Ransomware Impacts
Canadian healthcare provider’s unpatched Exchange server exploited twice by ransomware gangs
IT World Canada, March 1, 2022
Two ransomware gangs separately exploited an unpatched on-premises Microsoft Exchange server at a Canadian healthcare provider last year to steal and hold data hostage, although security updates to prevent successful attacks had been issued months earlier.
Destructive Malware Used to Target Ukraine Poses Threat to Healthcare
Health IT Security, February 28, 2022
HermeticWiper and WhisperGate, destructive malware variants used to target Ukraine, pose an increased threat to healthcare.
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) released a joint advisory to warn organizations about HermeticWiper and WhisperGate malware, two destructive malware variants that have been used to target organizations in Ukraine.
FortiGuard labs reports ransomware not slowing; continues to be relentless and more destructive
Engineering News, February 28, 2022
Sophistication, Speed, and Diversity of Attack Techniques Demonstrates Importance of Strengthening Entire Cyber Kill Chain.
Healthcare ransomware: Proactive risk management is a ‘business opportunity’
SC Media, February 25, 2022
Healthcare has always been a prime target for ransomware actors given its penchant for paying hackers’ demands to maintain care operations. Put simply, when patient care is on the line, waiting for rescue and resuming business makes it difficult for any disruptions to IT systems.
US healthcare organizations warned of cyber threats related to Russian invasion of Ukraine
SC Media, February 24, 2022
The American Hospital Association believes there are three areas of concerns for the U.S. healthcare sector, in light of the Russian invasion on Ukraine: hospitals and health systems may be directly targeted, or become incidental victims of Russian-backed threat actors, and could see operational disruptions brought on by a cyberattack.
Conti ransomware attack on Irish healthcare system may cost over $100 million
ZD Net, February 24, 2022
An Irish news outlet is reporting that the country’s healthcare system will have to spend more than $48 million recovering from a widespread ransomware attack by the Conti group that took place last year.
Jackson Hospital Suffers Patient Data Exfiltration Incident
Health IT Security, February 23, 2022
Recent data breaches included data exfiltration at Florida-based Jackson Hospital and improper PHI access by an employee at Michigan Medicine.
HHS Warns of Threats to Electronic Health Records
Gov Info Security, February 18, 2022
Healthcare entities should implement a more “proactive preparedness” approach for protecting their electronic health record/electronic medical record systems, which are an increasingly attractive target for cyberattacks and other breaches, federal regulators warn.
Report: Ransomware Up 50% in Education, 39% in Healthcare
Campus Safety, February 18, 2022
A new cybersecurity report found ransomware-based data leaks increased by 50% in the education sector and 39% in the healthcare sector.
HHS outlines threats to electronic health and medical records, remediation guidance
SC Media, February 18, 2022
The Department of Health and Human Services Cybersecurity Coordination Center (HC3) released new guidance outlining the biggest threats to the electronic medical record (EMR) and electronic health record (EHR) systems and best practice mitigation.
HHS outlines threats to electronic health and medical records, remediation guidance
SC Media, February 18, 2022
The Department of Health and Human Services Cybersecurity Coordination Center (HC3) released new guidance outlining the biggest threats to the electronic medical record (EMR) and electronic health record (EHR) systems and best practice mitigation.
Fertility Clinic Hit with Ransomware
Info Security, February 17, 2022
A fertility clinic based in New York City is notifying patients that their personal data may have been compromised and possibly stolen during a recent cyber-attack.
Approved for Public Release; Distribution Unlimited. Public Release Case Number 21-xxxx.