Effectively Combating Ransomware in Healthcare
By Susan Biddle – The havoc that Ransomware creates is real, its immediate impact and implications clear: workstations are disabled, files are encrypted and systems are shut down.
Read MoreRansomware
New HIPAA Guidance on Ransomware Attacks and ePHI Security
By Bob Grant – HHS Office for Civil Rights has released new guidance about how HIPAA-beholden entities can better equip themselves to deal with ransomware attacks. Ransomware is a targeted kind of malware attack that takes data ‘hostage.’ The attackers responsible then give the organization a countdown to a time at which they expect to receive a ‘ransom’ in exchange for restored access to the withheld data.
HIPAA and Ransomware: OCR Guidance
By Matt Fisher – After promising to provide guidance and insight for a breaking issue, the OCR came out with ransomware guidance under HIPAA. One major issue for debate was whether a ransomware attack constitutes a HIPAA breach. The guidance provides insight into where OCR is coming from and what it expects the industry to do in response to a ransomware attack.
Cyberattacks – The Federal Balance Between Accessibility and Protections
Since January 2016, hospitals in three states and the District of Columbia have been maliciously attacked and patient health data has been put at risk. These cyberattacks are a result of “Ransomware”, a malware system designed to “kidnap” data, prevent victims from accessing their information, and extort them for the decryption key.
HITRUST Pilot and Combating Ransomware
The Health Information Trust Alliance (HITRUST), the leading organization supporting the healthcare industry in advancing the state of information protection, has released findings from an industry pilot to evaluate methods to improve the collection and sharing of cyber threat Indicators of Compromise (IOCs) and enable their effective consumption by a broad range of organizations.
Ransomware Poses New Threats to Hospitals and Doctors in 2016
By Bob Grant – In the past 90 days, there have been five separate instances of hospitals in the US and Canada being hit by ransomware attacks. The most recent of these instances affected MedStar Health, which is the largest health care provider throughout the Maryland and Washington, D.C. area.
Is Ransomware Considered A HIPAA Breach?
By Art Gross – The topic of ransomware, especially ransomware hitting healthcare organizations, is making headlines daily. Dan Munro has a very good article over at Forbes that asks an important question: Is Ransomware Considered A Health Data Breach Under HIPAA?
You’re Not Investing Enough in IT Security, Healthcare
By Irv H. Lichtenwald – Mathematically, the gap between $3.6 million and $17,000 is a chasm. This is something you know well if you’re Hollywood Presbyterian Hospital, which paid the latter number to unlock patient data held hostage by malicious hackers using ransomware.
Fisher Talking Cybersecurity with Mac McMillan
By Matt Fisher – sits down with Mac McMillan, the Chairman, CEO and co-founder of CynergisTek, Inc., to discuss cybersecurity issues facing the healthcare industry. The discussion focused on ransomware, the role of data in healthcare, which includes where generated and how utilized, and how to manage access to data.