December 3, 2024 at 10:06AM Ransomware attacks on healthcare systems are escalating, revealing vulnerabilities that traditional patching cannot address. Healthcare organizations must adopt advanced threat protection, network segmentation, employee training, and robust incident response plans to enhance security. A comprehensive approach to cybersecurity, beyond mere patch management, is essential to safeguard patient data and services. … Read more
December 2, 2024 at 11:37AM Two NHS-affiliated hospitals in the UK experienced separate cyberattacks. Alder Hey Children’s Hospital faces data compromises with records leaked online, linked to a ransomware group. Meanwhile, Wirral University Teaching Hospital detected suspicious activity, affecting planned medical services. Both institutions are investigating the incidents and their impacts. **Meeting Notes Takeaways:** 1. … Read more
November 26, 2024 at 11:10AM Proposed legislation, the Health Care Cybersecurity and Resiliency Act of 2024, mandates American hospitals to adopt multifactor authentication and minimum cybersecurity standards. It aims to enhance coordination between HHS and CISA, improve breach reporting, and provide federal cybersecurity training, reflecting the urgency of safeguarding sensitive health data after recent cyberattacks. … Read more
November 18, 2024 at 08:49AM Great Plains Regional Medical Center in Oklahoma is notifying over 133,000 individuals of a ransomware attack that compromised personal information, including Social Security numbers and health data. The attack was discovered on September 8, and the hospital is offering free credit monitoring for affected patients while restoration efforts have been … Read more
November 11, 2024 at 06:47AM A data breach at law firm Thompson Coburn compromised information of over 300,000 patients connected to Presbyterian Healthcare Services. The incident highlights ongoing vulnerabilities in data security within legal and healthcare sectors. **Meeting Takeaways:** 1. **Incident Overview**: A data breach occurred at the law firm Thompson Coburn, which resulted in … Read more
October 29, 2024 at 12:11PM In February 2024, Change Healthcare suffered a ransomware attack, impacting 110 million individuals and exposing sensitive data. The incident prompted U.S. Senate legislation, the Health Infrastructure Security and Accountability Act (HISAA), aiming to enforce stricter cybersecurity standards in healthcare. HISAA includes compliance audits and funding for enhanced security. ### Meeting … Read more
October 25, 2024 at 07:13AM UnitedHealth informed the US health department that a February ransomware attack compromised the information of 100 million individuals. The incident highlights significant security vulnerabilities in healthcare systems, affecting a vast number of people. **Meeting Notes Summary:** – **Incident Reported**: UnitedHealth communicated to the US health department regarding a significant cybersecurity … Read more
October 25, 2024 at 12:06AM UnitedHealth reported that over 100 million individuals had their personal and healthcare data compromised in a ransomware attack on Change Healthcare in February. This incident, attributed to the BlackCat gang, is the largest healthcare data breach in recent years, causing significant disruptions and estimated losses of $2.45 billion. ### Meeting … Read more
October 24, 2024 at 11:57PM UnitedHealth confirmed a ransomware attack on Change Healthcare exposed personal information of over 100 million individuals, making it the largest healthcare data breach in recent years. The attack, attributed to the BlackCat group, caused significant operational disruption and resulted in an estimated $2.45 billion in losses for UnitedHealth. ### Meeting … Read more
October 24, 2024 at 05:19PM A recent study reveals that nearly 400 US healthcare organizations experienced ransomware attacks this fiscal year, leading to compromised data, operational disruptions, and increased patient volume. The average ransom paid has reached $4.4 million, highlighting healthcare’s vulnerability and the involvement of various nation-state actors in these cyberattacks. **Meeting Takeaways:** 1. … Read more