Scarinci Hollenbeck, LLC
The Firm
201-896-4100 info@sh-law.comAuthor: Scarinci Hollenbeck, LLC|December 1, 2020
The Federal Bureau of Investigation (FBI) is warning hospitals and healthcare providers to brace for a deluge of ransomware attacks. The advisory, which was issued jointly with the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Health and Human Services (HHS), states that the agencies have “credible information” of an increased and imminent cybercrime threat to U.S. hospitals and healthcare providers. The threat of ransomware attacks come as the U.S. healthcare system is already feeling the strain of COVID-19.
According to the advisory, cyber actors are targeting the Healthcare and Public Health (HPH) Sector with TrickBot and BazarLoader malware, often leading to ransomware attacks, data theft, and the disruption of healthcare services. “CISA, FBI, and HHS are sharing this information to provide warning to healthcare providers to ensure that they take timely and reasonable precautions to protect their networks from these threats,” the advisory states.
To be ready to fend off a potential cyberattack, hospitals and other healthcare providers should audit their existing cyber policies and procedures to ensure that they are sufficient. Of course, simply have protocols in place is just the first step; it is also important to verify that employees know how to carry them out and that they work as expected.
Below are a few specific tips:
Statistics confirm the growing cyber threat to the healthcare sector. According to a recent report by Checkpoint Security, the number of ransomware attacks against U.S. hospitals in October 2020 increased by 71 percent, compared to the previous month. CheckPoint Security also reported a 50 percent uptick in average daily ransomware attacks in the third quarter of 2020, compared to the first six months of the year. In Q3, attacks in the US skyrocketed by 200 percent.
In September, Universal Health Services suffered a ransomware attack impacting all of its 250 U.S. facilities. Without access to its computer systems, doctors and nurses were forced to use paper and pencil to keep patient records, and laboratory and imaging results were also delayed. Sky Lakes Medical Center in Oregon, the University of Vermont Health Network, and St. Lawrence Health System in New York reported similar incidents in recent weeks. In Germany, a ransomware attack resulted in a patient death. According to media reports, a woman who needed urgent admission died after she had to be transferred to another city for treatment.
CISA, FBI and HHS do not recommend paying ransoms. “Payment does not guarantee files will be recovered. It may also embolden adversaries to target additional organizations, encourage other criminal actors to engage in the distribution of ransomware, and/or fund illicit activities,” the advisory states. Instead, the agencies emphasize the importance of preparedness.
In light of the growing threat from malicious cyber criminals, it is imperative to review or establish critical cyber procedures, including patching plans, cyber incident response protocols, and business continuity plans. It is critical to involve legal counsel when preparing incident reports and response protocols.
If you have any questions or if you would like to discuss the matter further, please contact me, Maryam Meseha, or the Scarinci Hollenbeck attorney with whom you work, at 201-896-4100.
The Firm
201-896-4100 info@sh-law.comThe Federal Bureau of Investigation (FBI) is warning hospitals and healthcare providers to brace for a deluge of ransomware attacks. The advisory, which was issued jointly with the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Health and Human Services (HHS), states that the agencies have “credible information” of an increased and imminent cybercrime threat to U.S. hospitals and healthcare providers. The threat of ransomware attacks come as the U.S. healthcare system is already feeling the strain of COVID-19.
According to the advisory, cyber actors are targeting the Healthcare and Public Health (HPH) Sector with TrickBot and BazarLoader malware, often leading to ransomware attacks, data theft, and the disruption of healthcare services. “CISA, FBI, and HHS are sharing this information to provide warning to healthcare providers to ensure that they take timely and reasonable precautions to protect their networks from these threats,” the advisory states.
To be ready to fend off a potential cyberattack, hospitals and other healthcare providers should audit their existing cyber policies and procedures to ensure that they are sufficient. Of course, simply have protocols in place is just the first step; it is also important to verify that employees know how to carry them out and that they work as expected.
Below are a few specific tips:
Statistics confirm the growing cyber threat to the healthcare sector. According to a recent report by Checkpoint Security, the number of ransomware attacks against U.S. hospitals in October 2020 increased by 71 percent, compared to the previous month. CheckPoint Security also reported a 50 percent uptick in average daily ransomware attacks in the third quarter of 2020, compared to the first six months of the year. In Q3, attacks in the US skyrocketed by 200 percent.
In September, Universal Health Services suffered a ransomware attack impacting all of its 250 U.S. facilities. Without access to its computer systems, doctors and nurses were forced to use paper and pencil to keep patient records, and laboratory and imaging results were also delayed. Sky Lakes Medical Center in Oregon, the University of Vermont Health Network, and St. Lawrence Health System in New York reported similar incidents in recent weeks. In Germany, a ransomware attack resulted in a patient death. According to media reports, a woman who needed urgent admission died after she had to be transferred to another city for treatment.
CISA, FBI and HHS do not recommend paying ransoms. “Payment does not guarantee files will be recovered. It may also embolden adversaries to target additional organizations, encourage other criminal actors to engage in the distribution of ransomware, and/or fund illicit activities,” the advisory states. Instead, the agencies emphasize the importance of preparedness.
In light of the growing threat from malicious cyber criminals, it is imperative to review or establish critical cyber procedures, including patching plans, cyber incident response protocols, and business continuity plans. It is critical to involve legal counsel when preparing incident reports and response protocols.
If you have any questions or if you would like to discuss the matter further, please contact me, Maryam Meseha, or the Scarinci Hollenbeck attorney with whom you work, at 201-896-4100.
No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.