Cybersecurity

The digital security of healthcare institutions and data is a growing concern, with an increasing number of cyberattacks each year against healthcare systems, which are seen as easy targets. Cyber attacks often use ransomware to target personal health information, patient data and medical devices to cut off access to the data until a ransom is payed to the hacker. Cybercriminals have become more sophisticated, using malware, ransomware and spyware to attack outdated and vulnerable systems and software. Due to the interconnected nature of hospital IT systems today, the weakest link can be older web-enabled medical devices, including clinical and non-clinical systems. Employees are also a major target of attacks via malicious e-mails that prompt them to open attachments that then download malware onto the hospital's IT system.

Boston Children's physician group suffers data breach

Cybercrime group BrianLian took credit for the attack. It has been responsible for over 60 ransomware attacks in 2024 alone. 

cyberattack cybersecurity IT

Homeland Security warns healthcare organizations of hackers using 'password spraying' tactic

The agency said cybercrime cells in Iran are using brute force to breach and maintain covert access to IT systems. 

Ransomware Cyberattack Data Breach

Ransomware hit 67% of healthcare organizations this year—more than half paid up

A new survey from a cybersecurity firm shows ransomware attacks are increasing in frequency and healthcare entities are facing ever-higher demands. 

Thumbnail

Lone Michigan Medicine employee responsible for breach that impacted 58K patients

The employee fell for a phishing scam that gave an unknown hacker access to the academic hospital’s email system. 

Lehigh Valley Health Network to pay $65M after nudes of patients leaked online

The nudes were taken along with medical records during a February 2023 hack by BlackCat, a notorious ransomware syndicate.

Thumbnail

Another 947K patient records found to be leaked in MOVEit breach

The Centers for Medicare & Medicaid Services (CMS) and Wisconsin Physicians Service Insurance Corporation are sending notices to impacted patients. The data was leaked as a result of the May 2023 MOVEit exploit. 

The American Hospital Association (AMA) is warning healthcare systems the Russians may attempt cyber attacks amid rising tensions of the war in Ukraine and the international community's response. #Ukraine #warinukraine #ukrainewar

Report: Ransomware landscape changing, attacks down 16% since 2023

The rate of ransomware attacks may be slowing, but smaller players are causing havoc with targeted attacks, an analysis from Searchlight Cyber found.

Thumbnail

Healthcare Cybersecurity Act brought to House by bipartisan cosponsors

Initially proposed in 2022, the law was reintroduced to the Senate in July. Now it's being backed by members of the House.

 

Around the web

Given the precarious excitement of the moment—or is it exciting precarity?—policymakers and healthcare leaders must set directives guiding not only what to do with AI but also when to do it. 

The final list also included diabetes drugs sold by Boehringer Ingelheim and Merck. The first round of drug price negotiations reduced the Medicare prices for 10 popular drugs by up to 79%. 

HHS has thought through the ways AI can and should become an integral part of healthcare, human services and public health. Last Friday—possibly just days ahead of seating a new secretary—the agency released a detailed plan for getting there from here.