HIPAA Journal

OCTOBER 24, 2022

A relatively new data extortion and ransomware gang known as Daixin team is actively targeting U.S. Daixin Team first appeared on the radar in June 2022, with the group predominantly conducting data extortion and ransomware attacks on organizations in the health and public health sector (HPH).

Ransomware 69

Ransomware Governance HIPAA Public Health 69

Healthcare IT Today

MAY 16, 2024

While it’s amazing to consider two breaches and ransomware incidents the size of Change Healthcare and Ascension could happen so closely together, it’s very clear that healthcare is a target and we need to massively increase our investment in security to show we’ve learned from these experiences.

Ransomware 77

Ransomware US Department of Health and Human Services Hospitals Compliance 77

HIPAA Journal

APRIL 8, 2024

The Medusa ransomware group has leaked data stolen from American Renal Associates. American Renal Associates American Renal Associates (ARA), one of the largest providers of dialysis services in the United States and a provider of care for patients suffering from end-stage renal disease has experienced a Medusa ransomware attack.

Ransomware 67

Ransomware Health Insurance Licensing HIPAA 67

HIPAA Journal

MARCH 16, 2023

The Health Sector Cybersecurity Coordination Center (HC3) has shared threat intelligence information about the Black Basta ransomware group to help network defenders prevent and rapidly detect attacks in progress. The Black Basta group was first identified in April 2022 and is known to conduct ransomware and extortion attacks.

Ransomware 93

Ransomware HIPAA Governance 93

HIPAA Journal

FEBRUARY 10, 2023

Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), Department of Health and Human Services (HHS), and the Republic of Korea’s Defense Security Agency and National Intelligence Service warning of state-sponsored North Korean (DPRK) ransomware attacks on U.S.

Ransomware 100

Ransomware US Department of Health and Human Services HIPAA Hospitals 100

HIPAA Journal

JUNE 15, 2023

This joint advisory on LockBit is another example of effective collaboration with our partners to provide timely and actionable resources to help all organizations understand and defend against this ransomware activity,” said CISA Executive Assistant Director for Cybersecurity, Eric Goldstein. “As

Ransomware 78

Ransomware HIPAA Governance 78

HIPAA Journal

SEPTEMBER 13, 2022

Over the Labor Day weekend, Oakbend Medical Center in Richmond, TX, suffered a ransomware attack. The attack started on Thursday, September 1, 2022, and saw files on its network encrypted. In June 2022, the group conducted an attack on Fitzgibbon Hospital in Missouri and stole and published files containing sensitive patient data.

Ransomware 81

Ransomware HIPAA Doctors Governance 81

HIPAA Journal

SEPTEMBER 13, 2023

The indictments of multiple members of the TrickBot/Conti Ransomware groups have recently been unsealed and 11 members of these cybercriminal operations have been sanctioned by the United States and the United Kingdom. government and other U.S. Galochkin was also one of 11 individuals recently sanctioned by the U.S.

Ransomware 82

Ransomware Governance HIPAA Hospitals 82

HIPAA Journal

MARCH 24, 2022

The Federal Bureau of Investigation (FBI) Internet Crime Complaint Center (IC3) has released its 2021 Internet Crime Report , which reveals there were at least 649 ransomware attacks on critical infrastructure organizations from June 2021 to December 2021. Losses to ransomware are difficult to determine.

Ransomware 120

Ransomware Public Health Fraud HIPAA 120

HIPAA Journal

AUGUST 16, 2022

In August 2021, the Vice Society ransomware operation published data on its data leak site that had allegedly been obtained in a ransomware attack on United Health Centers of San Joaquin Valley. HIPAA Journal reported on the incident in September 2021. A comprehensive review of the affected data was completed on April 11, 2022.

Ransomware 96

Ransomware HIPAA Licensing Governance 96

HIPAA Journal

APRIL 28, 2022

Irvine, CA-based Smile Brands, a provider of support services for dental offices, has recently provided an update on the number of individuals affected by a ransomware attack that was discovered on April 24, 2021. The post Up to 2,592,494 individuals Affected by Smile Brands Ransomware Attack appeared first on HIPAA Journal.

Ransomware 106

Ransomware Health Insurance HIPAA Licensing 106

HIT Consultant

MARCH 20, 2022

If ransomware is not a topic of conversation around any healthcare organization’s boardroom table, directors and senior executives may be exposing the organization (and themselves) to considerable risk. Here’s a guide to ransomware trends for 2022 and steps healthcare leaders can take to help protect their organizations.

Ransomware 98

Ransomware HIPAA Governance Hospitals 98

HIPAA Journal

FEBRUARY 8, 2024

A new report from Chainalysis has revealed victims of ransomware attacks paid hackers $1.1 Last year was the first time that ransom payments exceeded $1bn and the annual total was a sizeable jump from the $567 million that was paid in 2022. The researchers believe this anomaly is linked to the Russia-Ukraine war.

Ransomware 83

Ransomware HIPAA Governance Hospitals 83

Compliancy Group

MARCH 30, 2023

The 2022 Internet Crime Report has revealed alarming statistics about the rampant rise in cybercrime, making it more critical than ever to be aware of the dangers and take necessary precautions. In 2022 there were a total of 800,944 complaints, which shows a 5% decrease from 2021, but the potential total loss has increased from $6.9

Ransomware 52

Ransomware Fraud HIPAA Compliance 52

HIT Consultant

DECEMBER 21, 2022

The key challenges faced by the industry include Data Breaches, Ransomware, Extensive use of Mobile Applications without proper ways to perform Authentication and Authorization and Lack of Healthcare Data Interoperability. Recent Data Breaches: – November 2022: Ransomware Hacker Steals Medibank Data on 9.7m Ransomware.

Ransomware 52

Ransomware HIPAA Health Insurance Governance 52

HIPAA Journal

OCTOBER 20, 2022

Check Point’s 2022 Mid-Year Report has revealed the healthcare industry has seen the biggest percentage rise in cyberattacks out of all industry sectors, increasing by 69% in 1H 2022, compared to 2021. Healthcare now ranks fifth highest in the number of weekly attacks, behind education, government/military, ISP/MSP, and communications.

Ransomware 117

Ransomware Governance HIPAA 117

Healthcare It News

MAY 2, 2024

UnitedHealth Group CEO Andrew Witty testified on May 1 before both the House and Senate about the seismic February 21 cyberattack of UHG subsidiary Change Healthcare, which was infiltrated by the ALPHV ransomware gang. Dr. Kim Schrier, D-Washington, also asked questions about the 2022 merger, which the U.S.

US Department of Health and Human Services 275

US Department of Health and Human Services HIPAA Ransomware Governance 275

AIHC

MARCH 12, 2024

Written by the AIHC Education Department This article provides an overview of how the media and government are reacting to the potential of artificial intelligence (AI) and potential threats associated with this advanced technology. A Government-Commissioned Report Released February 2024 The U.S.

Ransomware 59

Ransomware Governance Compliance HIPAA 59

HIPAA Journal

FEBRUARY 14, 2023

per breach in 2022. The most common root cause of third-party data breaches in 2022 was unauthorized network access, which accounted for 40% of cyberattacks on third parties. Black Kite attributes the decrease to Russian sanctions, which have hampered the ability of Russian cybercriminals to conduct ransomware attacks.

Ransomware 117

Ransomware HIPAA Governance 117

AIHC

MARCH 12, 2024

Written by the AIHC Education Department This article provides an overview of how the media and government are reacting to the potential of artificial intelligence (AI) and potential threats associated with this advanced technology. A Government-Commissioned Report Released February 2024 The U.S.

Ransomware 52

Ransomware Governance Compliance HIPAA 52

HIPAA Journal

MARCH 2, 2022

HC3 has warned that threats could come from three areas: Threat actors linked to the Russian government, threat actors linked to the Belarussian government, and cybercriminal groups operating out of Russia and its neighboring states. The post HHS Warns of Potential Threats to the Healthcare Sector appeared first on HIPAA Journal.

US Department of Health and Human Services 119

US Department of Health and Human Services Ransomware Governance HIPAA 119

Healthcare It News

JULY 31, 2023

Liederman has been in the trenches working to figure out how to set up network gates so skilled clinicians and other valuable healthcare staff – employees who may have simply lapsed in judgment – are helped to stop themselves from breaching HIPAA.

Ransomware 201

Ransomware Health Insurance HIPAA Governance 201

HIPAA Journal

MARCH 30, 2023

Ransomware and phishing continue to be the biggest cybersecurity concerns for healthcare organizations according to the February 2023 Current and Emerging Healthcare Cyber Threat Landscape report from Health-ISAC. Ransomware was the biggest concern for 2022 and 2023 with phishing and spear phishing in second.

Ransomware 92

Ransomware Fraud Governance Medical Billing 92

Healthcare IT Today

OCTOBER 4, 2023

In 2022, as cyberattacks globally rose by 38% year-on-year, healthcare became the third-most-attacked industry (behind government and education), recording an increase of 74% and reporting up to 1,463 incidents per week. Yet, despite the stakes, many healthcare organizations aren’t as well-protected as they could be.

Ransomware 104

Ransomware Electronic Medical Records Telemedicine HIPAA 104

HIPAA Journal

DECEMBER 29, 2022

The Louisiana healthcare system said suspicious activity was detected by its security team on October 21, 2022, and steps were taken to contain the activity and investigate a potential breach. Southwest Louisiana Health Care System did not disclose the exact nature of the cyberattack, but the Hive ransomware gang claimed responsibility.

Ransomware 93

Ransomware Health Insurance Licensing Medical Billing 93

HIPAA Journal

DECEMBER 1, 2022

Notifications were issued on November 14, 2022. According to the STAR substitute breach notice, the breach was detected in September 2022. The files included names, Social Security numbers, government ID numbers, financial account information, dates of birth, dates of service, health insurance information, and medical information.

Health Insurance 98

Health Insurance Ransomware HIPAA Governance 98

HIPAA Journal

MAY 26, 2023

An updated version of the StopRansomware Guide has been published that includes further recommendations on actions that can be taken to reduce the risk of ransomware attacks. The post CISA & Partners Release Updated StopRansomware Guide appeared first on HIPAA Journal.

Ransomware 55

Ransomware HIPAA Governance 55

HIPAA Journal

AUGUST 2, 2023

The administrative service provider said suspicious activity was detected within its network in early December 2022, and the forensic investigation confirmed on December 15, 2022, that an unauthorized third party accessed parts of its computer network where personal health information was stored.

Licensing 71

Licensing Electronic Medical Records Ransomware Health Insurance 71

HIPAA Journal

NOVEMBER 17, 2022

There was a global increase in cyberattacks in Q3, 2022, with attacks rising by 28% compared to the corresponding period last year. Education was the most extensively targeted sector in Q3, experiencing an 18% rise in attacks, followed by government/military which saw a 20% increase.

Ransomware 70

Ransomware Governance Health Insurance HIPAA 70

Healthcare IT Today

SEPTEMBER 15, 2023

The following is a guest article by Steven Stone, Head of Rubrik Zero Labs at Rubrik In early August, a ransomware attack disrupted operations across its network of 17 hospitals and more than 165 clinics in four states and forced some to rely on paper records. Put simply, ransomware attackers can apply more psychological pressure and impacts.

Ransomware 90

Ransomware Regulatory Compliance Compliance Regulations Compliance 90

HIPAA Journal

APRIL 12, 2022

Following the passing of the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), a rulemaking process will commence to implement statutory requirements; however, the fact sheet serves as an interim measure to guide organizations through the voluntary sharing of information about cyber-related events.

Ransomware 111

Ransomware HIPAA Governance 111

HIPAA Journal

JUNE 16, 2022

The compromised data included names, Social Security numbers, government identification numbers, financial account numbers, dates of birth, medical diagnosis or treatment information, health insurance information, and client identification numbers. Netgain Technologies reportedly paid a $2.3

Ransomware 85

Ransomware Health Insurance HIPAA Governance 85

HIPAA Journal

APRIL 11, 2023

Microsoft has announced that its Digital Crimes Unit, the Health Information Sharing and Analysis Center (Health-ISAC), and the cybersecurity firm Fortra are taking action to prevent the legitimate red team post-exploitation tool, Cobalt Strike, from being illegally used by malicious actors for delivering malware and ransomware.

Ransomware 86

Ransomware HIPAA Governance 86

HIPAA Journal

JUNE 8, 2023

Telligen subcontracted part of that work to Independent Living Systems (ILS), where the data breach occurred in June and July 2022. A few days later, on April 5, 2023, SJBHR was the victim of a ransomware attack that resulted in files being encrypted on certain computer systems. SJBHR does not believe the two incidents are related.

Medicaid 80

Medicaid Medicaid Ransomware Health Insurance 80

HIPAA Journal

OCTOBER 4, 2022

October is Cybersecurity Awareness Month – a 19-year collaborative effort between the government and industry to improve awareness of cybersecurity in the United States, led by the Cybersecurity and Infrastructure Security Agency (CISA) and the National Cybersecurity Alliance (NCA).

HIPAA 102

HIPAA Compliance Ransomware Governance 102

HIPAA Journal

JUNE 21, 2023

A draft rule was proposed in March 2022 to improve transparency about cybersecurity incidents at publicly traded companies. Only one-quarter of ransomware attacks are reported to public authorities, as the reporting of cyber incidents is voluntary. The decision has now been delayed until at least October 2023.

Ransomware 90

Ransomware HIPAA Governance 90

HIPAA Journal

MAY 24, 2023

Northwest Health – La Porte Impacted by Fortra GoAnywhere Hack Northwest Health – La Porte in Indiana has recently confirmed that the protected health information of 10,256 patients was compromised in the Clop ransomware group’s series of attacks between January 28, 2023, and January 30, 2023.

HIPAA 109

HIPAA Ransomware Licensing Governance 109