HIPAA Journal

OCTOBER 24, 2022

A relatively new data extortion and ransomware gang known as Daixin team is actively targeting U.S. Daixin Team first appeared on the radar in June 2022, with the group predominantly conducting data extortion and ransomware attacks on organizations in the health and public health sector (HPH).

Ransomware 70

Ransomware Governance HIPAA Public Health 70

HIPAA Journal

MARCH 16, 2023

The Health Sector Cybersecurity Coordination Center (HC3) has shared threat intelligence information about the Black Basta ransomware group to help network defenders prevent and rapidly detect attacks in progress. The Black Basta group was first identified in April 2022 and is known to conduct ransomware and extortion attacks.

Ransomware 96

Ransomware HIPAA Governance 96

HIPAA Journal

JANUARY 10, 2023

The latest data released by the cybersecurity firm Check Point has confirmed that 2022 was a particularly bad year for cyberattacks, which increased globally by 38% year-over-year fuelled by a sizeable increase in attacks on healthcare organizations. 2022 also saw two major milestones reached. million-record breach at Anthem Inc.

Ransomware 109

Ransomware HIPAA Hospitals Governance 109

HIPAA Journal

JULY 4, 2022

According to the PFC website, the company is one of the nation’s leading debt recovery agencies, and its client list includes many healthcare providers, retailers, financial organizations, and government agencies. Third-party forensics specialists were engaged to investigate the breach and provide assistance with securing its environment.

Ransomware 127

Ransomware HIPAA Health Insurance Governance 127

HIPAA Journal

APRIL 8, 2024

The Medusa ransomware group has leaked data stolen from American Renal Associates. American Renal Associates American Renal Associates (ARA), one of the largest providers of dialysis services in the United States and a provider of care for patients suffering from end-stage renal disease has experienced a Medusa ransomware attack.

Ransomware 68

Ransomware Health Insurance Licensing HIPAA 68

HIPAA Journal

JUNE 15, 2023

This joint advisory on LockBit is another example of effective collaboration with our partners to provide timely and actionable resources to help all organizations understand and defend against this ransomware activity,” said CISA Executive Assistant Director for Cybersecurity, Eric Goldstein. “As

Ransomware 78

Ransomware HIPAA Governance 78

HIPAA Journal

FEBRUARY 10, 2023

Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), Department of Health and Human Services (HHS), and the Republic of Korea’s Defense Security Agency and National Intelligence Service warning of state-sponsored North Korean (DPRK) ransomware attacks on U.S.

Ransomware 102

Ransomware US Department of Health and Human Services HIPAA Hospitals 102

HIPAA Journal

SEPTEMBER 13, 2022

Over the Labor Day weekend, Oakbend Medical Center in Richmond, TX, suffered a ransomware attack. The attack started on Thursday, September 1, 2022, and saw files on its network encrypted. In June 2022, the group conducted an attack on Fitzgibbon Hospital in Missouri and stole and published files containing sensitive patient data.

Ransomware 82

Ransomware HIPAA Doctors Governance 82

HIT Consultant

MARCH 20, 2022

If ransomware is not a topic of conversation around any healthcare organization’s boardroom table, directors and senior executives may be exposing the organization (and themselves) to considerable risk. Here’s a guide to ransomware trends for 2022 and steps healthcare leaders can take to help protect their organizations.

Ransomware 98

Ransomware HIPAA Governance Hospitals 98

HIPAA Journal

MARCH 24, 2022

The Federal Bureau of Investigation (FBI) Internet Crime Complaint Center (IC3) has released its 2021 Internet Crime Report , which reveals there were at least 649 ransomware attacks on critical infrastructure organizations from June 2021 to December 2021. Losses to ransomware are difficult to determine.

Ransomware 119

Ransomware Public Health Fraud HIPAA 119

HIPAA Journal

SEPTEMBER 13, 2023

The indictments of multiple members of the TrickBot/Conti Ransomware groups have recently been unsealed and 11 members of these cybercriminal operations have been sanctioned by the United States and the United Kingdom. government and other U.S. Galochkin was also one of 11 individuals recently sanctioned by the U.S.

Ransomware 81

Ransomware Governance HIPAA Hospitals 81

HIPAA Journal

APRIL 28, 2022

Irvine, CA-based Smile Brands, a provider of support services for dental offices, has recently provided an update on the number of individuals affected by a ransomware attack that was discovered on April 24, 2021. The post Up to 2,592,494 individuals Affected by Smile Brands Ransomware Attack appeared first on HIPAA Journal.

Ransomware 109

Ransomware Health Insurance HIPAA Licensing 109

HIPAA Journal

AUGUST 16, 2022

In August 2021, the Vice Society ransomware operation published data on its data leak site that had allegedly been obtained in a ransomware attack on United Health Centers of San Joaquin Valley. A comprehensive review of the affected data was completed on April 11, 2022.

Ransomware 96

Ransomware HIPAA Licensing Governance 96

HIT Consultant

DECEMBER 21, 2022

The key challenges faced by the industry include Data Breaches, Ransomware, Extensive use of Mobile Applications without proper ways to perform Authentication and Authorization and Lack of Healthcare Data Interoperability. Recent Data Breaches: – November 2022: Ransomware Hacker Steals Medibank Data on 9.7m Ransomware.

Ransomware 52

Ransomware HIPAA Health Insurance Governance 52

HIPAA Journal

FEBRUARY 8, 2024

A new report from Chainalysis has revealed victims of ransomware attacks paid hackers $1.1 Last year was the first time that ransom payments exceeded $1bn and the annual total was a sizeable jump from the $567 million that was paid in 2022. The researchers believe this anomaly is linked to the Russia-Ukraine war.

Ransomware 85

Ransomware HIPAA Governance Hospitals 85

HIPAA Journal

OCTOBER 20, 2022

Check Point’s 2022 Mid-Year Report has revealed the healthcare industry has seen the biggest percentage rise in cyberattacks out of all industry sectors, increasing by 69% in 1H 2022, compared to 2021. Healthcare now ranks fifth highest in the number of weekly attacks, behind education, government/military, ISP/MSP, and communications.

Ransomware 119

Ransomware Governance HIPAA 119

Compliancy Group

MARCH 30, 2023

The 2022 Internet Crime Report has revealed alarming statistics about the rampant rise in cybercrime, making it more critical than ever to be aware of the dangers and take necessary precautions. In 2022 there were a total of 800,944 complaints, which shows a 5% decrease from 2021, but the potential total loss has increased from $6.9

Ransomware 52

Ransomware Fraud HIPAA Compliance 52

HIPAA Journal

FEBRUARY 14, 2023

per breach in 2022. The most common root cause of third-party data breaches in 2022 was unauthorized network access, which accounted for 40% of cyberattacks on third parties. Black Kite attributes the decrease to Russian sanctions, which have hampered the ability of Russian cybercriminals to conduct ransomware attacks.

Ransomware 115

Ransomware HIPAA Governance 115

AIHC

MARCH 12, 2024

Written by the AIHC Education Department This article provides an overview of how the media and government are reacting to the potential of artificial intelligence (AI) and potential threats associated with this advanced technology. A Government-Commissioned Report Released February 2024 The U.S.

Ransomware 59

Ransomware Governance Compliance HIPAA 59

Healthcare IT Today

OCTOBER 4, 2023

In 2022, as cyberattacks globally rose by 38% year-on-year, healthcare became the third-most-attacked industry (behind government and education), recording an increase of 74% and reporting up to 1,463 incidents per week. Yet, despite the stakes, many healthcare organizations aren’t as well-protected as they could be.

Ransomware 117

Ransomware Electronic Medical Records Telemedicine HIPAA 117

HIPAA Journal

MARCH 30, 2023

Ransomware and phishing continue to be the biggest cybersecurity concerns for healthcare organizations according to the February 2023 Current and Emerging Healthcare Cyber Threat Landscape report from Health-ISAC. Ransomware was the biggest concern for 2022 and 2023 with phishing and spear phishing in second.

Ransomware 94

Ransomware Fraud Governance Medical Billing 94

AIHC

MARCH 12, 2024

Written by the AIHC Education Department This article provides an overview of how the media and government are reacting to the potential of artificial intelligence (AI) and potential threats associated with this advanced technology. A Government-Commissioned Report Released February 2024 The U.S.

Ransomware 52

Ransomware Governance Compliance HIPAA 52

HIPAA Journal

MARCH 2, 2022

HC3 has warned that threats could come from three areas: Threat actors linked to the Russian government, threat actors linked to the Belarussian government, and cybercriminal groups operating out of Russia and its neighboring states. Whispergate is one of three wiper malware variants that have recently been identified.

US Department of Health and Human Services 118

US Department of Health and Human Services Ransomware Governance HIPAA 118

HIPAA Journal

DECEMBER 29, 2022

The Louisiana healthcare system said suspicious activity was detected by its security team on October 21, 2022, and steps were taken to contain the activity and investigate a potential breach. Southwest Louisiana Health Care System did not disclose the exact nature of the cyberattack, but the Hive ransomware gang claimed responsibility.

Ransomware 94

Ransomware Health Insurance Licensing Medical Billing 94

Healthcare It News

JULY 31, 2023

There are also outside attacks that go beyond ransomware that destroy critical trust in a healthcare organization's ability to keep patient data safe. An example was the late 2022 breach of Medibank , Australia’s largest private health insurer, which included the Prime Minister's data.

Ransomware 215

Ransomware Health Insurance HIPAA Governance 215

HIPAA Journal

MAY 26, 2023

An updated version of the StopRansomware Guide has been published that includes further recommendations on actions that can be taken to reduce the risk of ransomware attacks. The updated StopRansomware Guide can be downloaded from CISA on this link.

Ransomware 57

Ransomware HIPAA Governance 57

HIPAA Journal

NOVEMBER 17, 2022

There was a global increase in cyberattacks in Q3, 2022, with attacks rising by 28% compared to the corresponding period last year. Education was the most extensively targeted sector in Q3, experiencing an 18% rise in attacks, followed by government/military which saw a 20% increase.

Ransomware 76

Ransomware Governance Health Insurance HIPAA 76

HIPAA Journal

DECEMBER 1, 2022

Notifications were issued on November 14, 2022. According to the STAR substitute breach notice, the breach was detected in September 2022. The files included names, Social Security numbers, government ID numbers, financial account information, dates of birth, dates of service, health insurance information, and medical information.

Health Insurance 100

Health Insurance Ransomware HIPAA Governance 100

Healthcare IT Today

SEPTEMBER 15, 2023

The following is a guest article by Steven Stone, Head of Rubrik Zero Labs at Rubrik In early August, a ransomware attack disrupted operations across its network of 17 hospitals and more than 165 clinics in four states and forced some to rely on paper records. Put simply, ransomware attackers can apply more psychological pressure and impacts.

Ransomware 90

Ransomware Regulatory Compliance Compliance Regulations Compliance 90

Healthcare It News

MAY 2, 2024

UnitedHealth Group CEO Andrew Witty testified on May 1 before both the House and Senate about the seismic February 21 cyberattack of UHG subsidiary Change Healthcare, which was infiltrated by the ALPHV ransomware gang. Dr. Kim Schrier, D-Washington, also asked questions about the 2022 merger, which the U.S.

US Department of Health and Human Services 289

US Department of Health and Human Services HIPAA Ransomware Governance 289

HIPAA Journal

AUGUST 2, 2023

The administrative service provider said suspicious activity was detected within its network in early December 2022, and the forensic investigation confirmed on December 15, 2022, that an unauthorized third party accessed parts of its computer network where personal health information was stored.

Licensing 69

Licensing Electronic Medical Records Ransomware Health Insurance 69

HIPAA Journal

JUNE 16, 2022

The compromised data included names, Social Security numbers, government identification numbers, financial account numbers, dates of birth, medical diagnosis or treatment information, health insurance information, and client identification numbers. Netgain Technologies reportedly paid a $2.3

Ransomware 88

Ransomware Health Insurance HIPAA Governance 88

HIPAA Journal

APRIL 11, 2023

Microsoft has announced that its Digital Crimes Unit, the Health Information Sharing and Analysis Center (Health-ISAC), and the cybersecurity firm Fortra are taking action to prevent the legitimate red team post-exploitation tool, Cobalt Strike, from being illegally used by malicious actors for delivering malware and ransomware.

Ransomware 86

Ransomware HIPAA Governance 86

Healthcare IT Today

NOVEMBER 6, 2022

Among all payers, social engineering is the most common type of attempted cyberattack, followed by ransomware. Federal healthcare technology consultancy National Government Services named Judy Jiao its first-ever chief information officer. Patient access analytics firm LeanTaas appointed Hugh Cassidy as chief data scientist.

Governance 97

Governance Ransomware Nurses Hospitals 97

Healthcare IT Today

APRIL 25, 2024

The data is also necessary in order to maintain services to patients, so when a cybercriminal uses ransomware and makes that data unavailable, healthcare entities struggle to provide necessary care for patients. The cost of allowing a data breach to occur can cause an exponential financial impact on an organization.

Ransomware 115

Ransomware Compliance Fraud Governance 115

HIPAA Journal

APRIL 12, 2022

Following the passing of the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), a rulemaking process will commence to implement statutory requirements; however, the fact sheet serves as an interim measure to guide organizations through the voluntary sharing of information about cyber-related events.

Ransomware 114

Ransomware HIPAA Governance 114

HIPAA Journal

JUNE 8, 2023

Telligen subcontracted part of that work to Independent Living Systems (ILS), where the data breach occurred in June and July 2022. A few days later, on April 5, 2023, SJBHR was the victim of a ransomware attack that resulted in files being encrypted on certain computer systems. SJBHR does not believe the two incidents are related.

Medicaid 78

Medicaid Medicaid Ransomware Health Insurance 78