HIPAA Journal

FEBRUARY 27, 2023

The healthcare and public health (HPH) sector has been warned about cyberattacks involving MedusaLocker ransomware – one of the lesser-known ransomware variants used in cyberattacks on the sector. The ransomware variant was first detected in September 2019 and the group is thought to primarily target the HPH sector.

Ransomware 101

Ransomware Public Health HIPAA 101

HIPAA Journal

JULY 20, 2022

June 2022 saw 70 healthcare data breaches of 500 or more records reported to the Department of Health and Human Services’ Office for Civil Rights (OCR) – two fewer than May and one fewer than June 2021. That is the highest monthly total so far in 2022. Largest Healthcare Data Breaches Reported in June 2022.

Electronic Medical Records 110

Electronic Medical Records Ransomware HIPAA Hospitals 110

HIPAA Journal

MAY 10, 2022

The tactics, techniques, and procedures (TTPs) used by ransomware and other cyber threat actors are constantly evolving to evade detection and allow the groups to conduct more successful attacks. HC3 has not observed any change in the numbers of IABs working with ransomware gangs in Q1, 2022, with similar numbers observed as throughout 2022.

Ransomware 109

Ransomware COVID-19 HIPAA Public Health 109

HIPAA Journal

MARCH 9, 2023

A joint cybersecurity advisory has been published by CISA and the FBI, sharing details of the tactics, techniques, and procedures (TTPs) used by the Royal ransomware gang and Indicators of Compromise (IoCs) to help network defenders better protect against attacks. Full IoCs and TTPs are detailed in the cybersecurity alert.

Ransomware 81

Ransomware Public Health HIPAA 81

HIPAA Journal

JANUARY 16, 2023

The Health Sector Cybersecurity Coordination Center (HC3) has shared threat intelligence on two sophisticated and aggressive ransomware operations – Blackcat and Royal – which pose a significant threat to the healthcare and public health (HPH) sector. The group primarily targets organizations in the United States.

Ransomware 86

Ransomware Public Health HIPAA Hospitals 86

HIPAA Journal

MARCH 24, 2022

The Federal Bureau of Investigation (FBI) Internet Crime Complaint Center (IC3) has released its 2021 Internet Crime Report , which reveals there were at least 649 ransomware attacks on critical infrastructure organizations from June 2021 to December 2021. Losses to ransomware are difficult to determine.

Ransomware 119

Ransomware Public Health Fraud HIPAA 119

HIPAA Journal

MARCH 9, 2023

In what is believed to be a first, the BlackCat ransomware gang has published naked images of patients that were stolen in one of its attacks on a healthcare organization in an attempt to pressure the victim into paying the ransom. BlackCat is not the only ransomware gang to try new tactics to get victims to pay up.

Ransomware 105

Ransomware Public Health HIPAA 105

HIPAA Journal

JANUARY 6, 2023

The Health Sector Cybersecurity Coordination Center (HC3) has shared information on the Clop (Cl0p) ransomware-as-a-service operation, the affiliates of which are known to conduct attacks on the healthcare and public health (HPH) sector. Several healthcare providers were affected and had sensitive data leaked.

Ransomware 85

Ransomware Public Health HIPAA Doctors 85

HIPAA Journal

NOVEMBER 18, 2022

The Hive ransomware-as-a-service (RaaS) operation first emerged in June 2021 and has aggressively targeted the health and public health sector (HPH) and continues to do so. The post Feds Issue Warning to HPH Sector About Aggressive Hive Ransomware Group appeared first on HIPAA Journal.

Ransomware 120

Ransomware Public Health HIPAA Hospitals 120

HIPAA Journal

FEBRUARY 10, 2023

Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), Department of Health and Human Services (HHS), and the Republic of Korea’s Defense Security Agency and National Intelligence Service warning of state-sponsored North Korean (DPRK) ransomware attacks on U.S.

Ransomware 102

Ransomware US Department of Health and Human Services HIPAA Hospitals 102

Becker's Health IT

MARCH 24, 2023

The healthcare and public health sector was the most targeted critical infrastructure sector for ransomware attacks in 2022, according to a March 22 crime report from the FBI.

Ransomware 56

Ransomware Public Health 56

HIPAA Journal

MAY 18, 2023

A joint cybersecurity alert has been issued by the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and Australian Cyber Security Centre (ACSC) about the BianLian ransomware and data extortion group.

Ransomware 91

Ransomware Public Health HIPAA 91

HIPAA Journal

OCTOBER 24, 2022

A relatively new data extortion and ransomware gang known as Daixin team is actively targeting U.S. healthcare organizations, prompting a warning from the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS).

Ransomware 70

Ransomware Governance HIPAA Public Health 70

HIPAA Journal

MARCH 2, 2022

The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center (HC3) has issued a warning to the U.S. health sector about potential cyber threats that could spill over from the conflict and affect U.S. healthcare organizations.

US Department of Health and Human Services 118

US Department of Health and Human Services Ransomware Governance HIPAA 118

HIPAA Journal

JULY 21, 2022

Department of Justice has announced that around $500,000 in Bitcoin has been seized from North Korean threat actors who were using Maui ransomware to attack healthcare organizations in the United States. The new ransomware variant was discovered during an investigation of a ransomware attack on a hospital in Kansas in May 2021.

Ransomware 96

Ransomware HIPAA Hospitals Public Health 96

HIPAA Journal

JANUARY 31, 2024

In the paper, the HHS indicated it will be adopting a carrot-and-stick approach by developing voluntary Healthcare and Public Health (HPH) Sector Cybersecurity Goals (CPGs) that consist of cybersecurity measures that will have the greatest impact on security along with an update to the HIPAA Security Rule to add new cybersecurity requirements.

Ransomware 120

Ransomware HIPAA Hospitals Compliance 120

C&M Health Law

MARCH 4, 2022

The Russia-Ukraine conflict is increasing the risk of ransomware attacks and other cyber threats for U.S. companies, and those in the health care industry may be targeted. health care and public health sector. health care and public health sector.

Ransomware 59

Ransomware Public Health Hospitals 59

HIPAA Journal

APRIL 6, 2023

The group has been active since at least January 2022 and has been actively targeting countries that have pledged support for Ukraine following the Russian invasion, especially NATO countries. In December 2022, KillNet embarked upon a campaign of DDoS attacks on organizations in the HPH sector.

Ransomware 101

Ransomware Hospitals Health Insurance Public Health 101

HIPAA Journal

AUGUST 23, 2022

The Health Sector Cybersecurity Coordination Center has issued a warning about social engineering and voice phishing (vishing) attacks on the healthcare and public health (HPH) sector. In cybersecurity terms, social engineering is the manipulation of individuals by malicious actors to further their own aims.

Ransomware 102

Ransomware COVID-19 Public Health HIPAA 102

HIPAA Journal

APRIL 25, 2023

Data breaches have recently been announced by Santa Clara Family Health Plan, United Steelworkers Local 286, Robeson Health Care Corporation, Two Rivers Public Health Department, and NewBridge Services. TRPHD said suspicious activity was detected within its server infrastructure on November 9, 2022.

Health Insurance 83

Health Insurance Public Health Ransomware Fraud 83

Hall Render

APRIL 22, 2022

21 top management risks in healthcare for 2022. $1B HHS Secretary Outlines FY 2023 Mental Health Investments at Senate Hearing. HHS Issues Warning to HPH Sector about Hive Ransomware. million in ARP funds to train health workers in local communities. Patient generated data can be a key factor in reducing health inequity.

COVID-19 40

COVID-19 Nursing Homes US Department of Health and Human Services Nurses 40

HIT Consultant

JANUARY 13, 2023

Cyberattacks on the healthcare industry will continue to increase: The healthcare industry is most vulnerable to cyberattacks, which makes it a lucrative target for cybercriminals; attacks on the healthcare industry have grown significantly in 2022, and attacks will even go further in 2023. million per incident.

Ransomware 98

Ransomware Public Health Hospitals 98

Hall Render

SEPTEMBER 16, 2022

Main Line Health shifts pediatric affiliation to CHOP after 25 years with Nemours. Delaware public health officials working to expand monkeypox vaccine access. Children’s Hospital takes over pediatric work at Main Line Health as Nemours affiliation ends. Aaron Weismann on ransomware attacks. Mark Cuban-backed D.C.

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nurses Nursing Homes 40

Hall Render

MAY 13, 2022

Arizona Hospital Safety Grades 2022: The Best And Worst. Banner invests in Atlas Health Partners, plans to double ASC footprint. California Hospital Safety Grades 2022: The Best And Worst. Vendor’s Ransomware Attack Is Latest Supply Chain Warning. Now Durango’s public health agency is sounding the alarm.

COVID-19 40

COVID-19 Nurses Nursing Homes Hospitals 40

Hall Render

NOVEMBER 4, 2022

Las Vegas physicians offer free health screenings for the homeless. When Monkeypox Reaches Rural Communities, It Collides With Strained Public Health Systems. Bedford nursing facility owes $86K in back wages, damages for 74 health care workers. The exec: Northwell Health’s new VP of public health advocacy.

US Department of Health and Human Services 40

US Department of Health and Human Services COVID-19 Nurses Nursing Homes 40

Hall Render

MAY 20, 2022

AHA asks HHS to continue the public health emergency until conditions stabilize. Considerations for Social Determinants of Health Screening Design. COVID-19 public health emergency set to be extended. Covid-19 remains a public health emergency in US, administration says.

COVID-19 40

COVID-19 Nursing Homes Nurses Hospitals 40

HIPAA Journal

JANUARY 12, 2023

Cybercriminals have been increasingly attacking healthcare vendors because they are a much less secure part of the supply chain and in 2022, many of the largest healthcare data breaches reported involved vendors. million patients, to name but a few.

Electronic Medical Records 96

Electronic Medical Records Ransomware Fraud Public Health 96

Healthcare Law Blog

JULY 5, 2022

As always, with technology comes data, and experts weighed in on issues like data use, licensing, aggregation, new rules on information blocking, ransomware attacks/cyber insurance, and preparing for disasters, whether natural or human-made. Regulatory and Enforcement Environment.

Fraud 52

Fraud Governance Ransomware Licensing 52

Compliancy Group

MAY 18, 2022

In March of 2022, President Biden signed into law the Consolidated Appropriations Act 2022. The Consolidated Appropriations Act 2022 wears many hats. trillion bill is a new law, the Cyber Incident Reporting for Critical Infrastructure Act of 2022. Details of the Consolidated Appropriations Act 2022 are provided below. .

HIPAA 52

HIPAA Ransomware Compliance Public Health 52

AIHC

NOVEMBER 6, 2023

This increase in expense and provider time was added to the exposure of potential hacking, ransomware and other cybersecurity risks associated with storing and transmitting electronic patient records. OCR Recognized Security Practices VIDEO This video released in October, 2022 features Nick Heesters, senior advisor for cybersecurity at OCR.

HIPAA 59

HIPAA Compliance Governance Health Insurance 59

AIHC

NOVEMBER 6, 2023

This increase in expense and provider time was added to the exposure of potential hacking, ransomware and other cybersecurity risks associated with storing and transmitting electronic patient records. OCR Recognized Security Practices VIDEO This video released in October, 2022 features Nick Heesters, senior advisor for cybersecurity at OCR.

HIPAA 52

HIPAA Compliance Governance Health Insurance 52

Hall Render

AUGUST 19, 2022

CDC, amid criticism for COVID-19 response, plans reorganization as public health threats grow. CISA warns of ransomware threat targeting healthcare, medical organizations. ChristianaCare backs out of deal to buy Crozer Health from Prospect Medical Holdings. Delaware public health officials focus efforts on Monkeypox.

COVID-19 40

COVID-19 Nursing Homes US Department of Health and Human Services Nurses 40

Health Care Law Brief

DECEMBER 8, 2023

Department of Health and Human Services (HHS) recently issued a strategy paper highlighting key aspects of its plan to revamp cybersecurity requirements in the healthcare industry. Citing a 93% increase in large data breaches in healthcare from 2018 to 2022 and a rapid increase in ransomware attacks against U.S.

Ransomware 52

Ransomware HIPAA Public Health Health Insurance 52

Healthcare IT Today

MARCH 31, 2023

Kynan Carver, DoD Cybersecurity Lead at Maximus By implementing a Zero Trust Architecture (ZTA) for cybersecurity, health agencies and organizations can effectively increase patient confidence in exchanging medical information. One approach to combat ransomware is 3-2-1-1 data protection.

US Department of Health and Human Services 102

US Department of Health and Human Services Ransomware Health Outcomes Compliance 102

Compliancy Group

NOVEMBER 14, 2022

In March 2022, President Joe Biden signed the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). The attacks on critical infrastructure in America, such as the Colonial Pipeline ransomware attack in May 2021, prompted the passage of CIRCIA. One of these industries is healthcare and public health. .

Ransomware 52

Ransomware HIPAA Compliance Public Health 52

Hall Render

APRIL 1, 2022

Coalition of hospitals, health plans and others urge for stronger guidance around third-party apps. Hospital, long-term care groups again petition Becerra to extend COVID-19 public health emergency. Rural Alabama wastewater infrastructure ‘public health issue’ gets much-needed attention. CALIFORNIA.

COVID-19 40

COVID-19 US Department of Health and Human Services Nursing Homes Nurses 40

HIPAA Journal

MAY 23, 2023

month-over-month fall in the number of reported healthcare data breaches with 52 breaches of 500 or more records reported to the HHS’ Office for Civil Rights (OCR) – less than the 12-month average of 58 breaches per month, and one less than in April 2022. Luke’s Health System, Ltd. There was a 17.5% to 4,425,891 records.

Ransomware 98

Ransomware HIPAA Medicaid Medicaid 98