Editor's Note Iranian cyber actors employing techniques such as brute force, password spraying, and multifactor authentication (MFA) "push bombing" to compromise healthcare and other critical infrastructure sectors, the American Hospital Association (AHA) reported October 17. The report cites an October 16 joint advisory issued on October 16 by the FBI,…

Read More

Editor's Note The Health Infrastructure Security and Accountability Act, introduced by Senators Ron Wyden (D-Ore.) and Mark Warner (D-Va.), proposes new mandatory cybersecurity standards for the healthcare sector, with oversight from the Department of Health and Human Services (HHS), Nextgov/FCW reported September 26. The bill, which amends the Health Insurance…

Read More

Editor's Note Cyberattacks in August 2024 are the latest examples of a specific Iranian group intensifying efforts against US organizations since 2017, Healthcare IT News reported September 3. Citing an advisory issued by the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Defense…

Read More

Editor's Note The Red Cross is reporting a 25-percent drop in its national blood inventory due to hot weather a month after the American Hospital Association (AHA) warned about the impact of cyberattacks on critical supplies at hospitals. According to an August 6 report in The Hill, heat-related challenges have…

Read More

Editor's Note Responding to and recovering from data breaches in healthcare is more expensive than any other industry, according to a report by IBM and the Ponemon Institute. Healthcare Dive reported on the results August 1. According to that article, the $9.8 million average cost for a breach this year…

Read More

Editor's Note Although SecurityScorecard gave the US healthcare a “better than expected” B+ rating for cybersecurity in 2024, the supply chain cybersecurity firm also highlighted significant risks in application and endpoint security, HealthcareIT News reported June 25.   Overall, 35% of third-party data breaches in 2023 affected healthcare organizations, the…

Read More

Editor's Note A June 24 advisory from the FBI and Department of Health and Human Services warns healthcare organizations about attempts to steal payments through phishing and social engineering tactics, according to a post from the American Hospital Association (AHA). The attackers target employee email accounts to access login information…

Read More

Editor's Note Qilin, a ransomware group based in Russia, claimed responsibility for a cyberattack against pathology services provider Synnovis that paralyzed London Hospitals and is now requesting $50 million, Becker’s Health IT reported June 20. Citing a report from Bloomberg, the article notes that the attack disrupted services at London-based hospitals…

Read More

Editor's Note Change Healthcare has started to notify health care providers about patient data stolen in the February cyberattack and announced plans to mail affected individuals as well. A unit of UnitedHealth Group, the organization issued the update June 20. “CHC is providing this notice now to help individuals understand…

Read More

Editor's Note The Centers for Medicare & Medicaid Services (CMS) has announced assistance for providers affected by the Change Healthcare cyberattack ends next month. According to the June 17 announcement, payments under the Accelerated and Advance Payment (AAP) Program for the Change Healthcare/Optum Payment Disruption (CHOPD) will end July 12,…

Read More