Editor's Note Billing, records, appointment scheduling and other systems at Lurie Children’s Hospital were still offline a week after representatives of had to cancel a planned OR Business Management Conference presentation due to a cyberattack. According to a February 12 report from the Chicago Sun-Times, the January 31 cyberattack is…

Read More

Editor's Note A near doubling of ransomware attacks on healthcare systems from 2022 to 2023 could point to a problematic trend, according to a January 2 report from cybersecurity firm Emsisoft. Specifically, findings show 46 ransomware attacks in 2023 compared to 25 in 2022 and 27 in 2021. The 2023…

Read More

Editor's Note The FBI has infiltrated the ransomware group BlackCat—the group responsible for a February cyberattack on the Lehigh Valley Health Network—and issued a decryption tool enabling victims around the world to restore their systems, according to a December 19 Justice Department press release.   Emerging during the past 18…

Read More

Editor's Note The US Department of Health and Human Services (HHS) released a new concept paper on the department’s strategy regarding cybersecurity for the healthcare sector, a December 6 HHS press release reports. The paper details four pillars for action:  publishing new voluntary healthcare-specific cybersecurity performance goals working with Congress…

Read More

Editor's Note Cisco has released an update that fixes a critical vulnerability in their Emergency Responder communications platform, a system used throughout the health sector, an October 6 HC3: Sector Alert from the Department of Health and Human Services (HHS) Office of Information Security reports. The HHS recommends that healthcare systems…

Read More

Editor's Note The Joint Commission, on August 15, issued “Sentinel Event Alert 67: Preserving patient safety after a cyberattack.” The Alert focuses on risks associated with cyberattacks and provides recommendations on how healthcare organizations can deliver safe patient care if a cyberattack occurs. Actions suggested by The Joint Commission include:…

Read More

Editor's Note On August 4, the Department of Health and Human Services Health Sector Cybersecurity Coordination Center released a security alert warning hospitals of a new ransomware group called Rhysida that has been active since May 2023 and is recently targeting healthcare by breaching networks and demanding a ransom. According…

Read More

Takeaways • Patient data & safety are at risk: 94% of hospitals have experienced at least one cyberattack. • Less than half of hospitals in the US carry cybersecurity insurance. • Security is a two-part strategy: cybersecurity insurance as well as preventative measures (eg, encrypted backups, patches, and training). When…

Read More