HIPAA Journal

JULY 7, 2022

A joint security alert has been issued to the healthcare and public health sector by the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Department of the Treasury warning about the threat of Maui ransomware attacks.

Ransomware 135

Ransomware Public Health Electronic Medical Records HIPAA 135

HIPAA Journal

AUGUST 7, 2023

The HHS’ Health Sector Cybersecurity Coordination Center (HC3) has issued a security alert about a new ransomware group – Rhysida – which is conducting high-impact attacks across multiple industry sectors. The Cobalt Strike attack framework is deployed on compromised systems and used to deliver the ransomware payload.

Ransomware 82

Ransomware Public Health HIPAA Governance 82

HIPAA Journal

DECEMBER 9, 2022

The Health Sector Cybersecurity Coordination Center (HC3) has issued a warning to the healthcare and public health (HPH) sector about Royal ransomware attacks. Royal ransomware is a new ransomware threat that was first observed being used in attacks in September 2022.

Ransomware 111

Ransomware Public Health HIPAA 111

HIPAA Journal

FEBRUARY 9, 2024

The Healthcare and Public Health (HPH) Sector has been warned about cyberattacks involving Akira ransomware , of which there have been at least 81 since the new ransomware variant was discovered in May 2023. Akira is a ransomware-as-a-service (RaaS) operation that is thought to have ties to the Conti ransomware group.

Ransomware 70

Ransomware Public Health HIPAA 70

HIPAA Journal

MAY 1, 2023

The Health Sector Cybersecurity and Coordination Center (HC3) has issued a fresh ransomware warning to the healthcare and public health (HPH) sector following a spate of attacks on the HPH sector in April by the Clop and LockBit ransomware groups. LockBit ransomware was deployed in some of the attacks.

Ransomware 103

Ransomware Public Health HIPAA 103

HIPAA Journal

FEBRUARY 27, 2023

The healthcare and public health (HPH) sector has been warned about cyberattacks involving MedusaLocker ransomware – one of the lesser-known ransomware variants used in cyberattacks on the sector. The ransomware variant was first detected in September 2019 and the group is thought to primarily target the HPH sector.

Ransomware 101

Ransomware Public Health HIPAA 101

HIPAA Journal

MARCH 24, 2022

The Federal Bureau of Investigation (FBI) Internet Crime Complaint Center (IC3) has released its 2021 Internet Crime Report , which reveals there were at least 649 ransomware attacks on critical infrastructure organizations from June 2021 to December 2021. Losses to ransomware are difficult to determine.

Ransomware 121

Ransomware Public Health Fraud HIPAA 121

HIPAA Journal

FEBRUARY 10, 2023

Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), Department of Health and Human Services (HHS), and the Republic of Korea’s Defense Security Agency and National Intelligence Service warning of state-sponsored North Korean (DPRK) ransomware attacks on U.S.

Ransomware 102

Ransomware US Department of Health and Human Services HIPAA Hospitals 102

HIPAA Journal

MARCH 9, 2023

In what is believed to be a first, the BlackCat ransomware gang has published naked images of patients that were stolen in one of its attacks on a healthcare organization in an attempt to pressure the victim into paying the ransom. BlackCat is not the only ransomware gang to try new tactics to get victims to pay up.

Ransomware 105

Ransomware Public Health HIPAA 105

HIPAA Journal

MARCH 9, 2023

A joint cybersecurity advisory has been published by CISA and the FBI, sharing details of the tactics, techniques, and procedures (TTPs) used by the Royal ransomware gang and Indicators of Compromise (IoCs) to help network defenders better protect against attacks. Full IoCs and TTPs are detailed in the cybersecurity alert.

Ransomware 83

Ransomware Public Health HIPAA 83

HIPAA Journal

MAY 10, 2022

The tactics, techniques, and procedures (TTPs) used by ransomware and other cyber threat actors are constantly evolving to evade detection and allow the groups to conduct more successful attacks. HC3 has not observed any change in the numbers of IABs working with ransomware gangs in Q1, 2022, with similar numbers observed as throughout 2022.

Ransomware 110

Ransomware COVID-19 HIPAA Public Health 110

HIPAA Journal

NOVEMBER 30, 2022

There was a slight downturn in ransomware attacks in Q3, although it is too early to tell if that downward trend will continue. Even with the reduction in attacks, ransomware is still the biggest cyber threat faced by organizations, and the attacks are among the costliest cybersecurity incidents to mitigate. of attacks.

Ransomware 102

Ransomware Public Health HIPAA 102

HIPAA Journal

OCTOBER 6, 2022

An affiliate of the infamous Netwalker ransomware gang has been sentenced to serve 20 years in jail for his role in ransomware attacks on entities in the United States. A law enforcement investigation into the ransomware attacks conducted by Vachon-Desjardins on U.S. A ransom of $1.14 District Court Judge, William F.

Ransomware 101

Ransomware Fraud COVID-19 HIPAA 101

HIPAA Journal

JANUARY 16, 2023

The Health Sector Cybersecurity Coordination Center (HC3) has shared threat intelligence on two sophisticated and aggressive ransomware operations – Blackcat and Royal – which pose a significant threat to the healthcare and public health (HPH) sector. The group primarily targets organizations in the United States.

Ransomware 84

Ransomware Public Health HIPAA Hospitals 84

HIPAA Journal

NOVEMBER 18, 2022

The Hive ransomware-as-a-service (RaaS) operation first emerged in June 2021 and has aggressively targeted the health and public health sector (HPH) and continues to do so. The post Feds Issue Warning to HPH Sector About Aggressive Hive Ransomware Group appeared first on HIPAA Journal.

Ransomware 122

Ransomware Public Health HIPAA Hospitals 122

HIPAA Journal

FEBRUARY 14, 2022

A joint security advisory has been issued by cybersecurity agencies in the United States, United Kingdom, and Australia, warning about the increased globalized threat of ransomware attacks and the elevated risk of targeted attacks on critical infrastructure entities. 2021 Ransomware Attack Trends. 2021 Ransomware Attack Trends.

Ransomware 122

Ransomware Governance HIPAA Public Health 122

HIPAA Journal

JANUARY 6, 2023

The Health Sector Cybersecurity Coordination Center (HC3) has shared information on the Clop (Cl0p) ransomware-as-a-service operation, the affiliates of which are known to conduct attacks on the healthcare and public health (HPH) sector. Several healthcare providers were affected and had sensitive data leaked.

Ransomware 83

Ransomware Public Health HIPAA Doctors 83

HIPAA Journal

MAY 18, 2023

A joint cybersecurity alert has been issued by the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and Australian Cyber Security Centre (ACSC) about the BianLian ransomware and data extortion group.

Ransomware 91

Ransomware Public Health HIPAA 91

HIPAA Journal

JANUARY 31, 2024

In the paper, the HHS indicated it will be adopting a carrot-and-stick approach by developing voluntary Healthcare and Public Health (HPH) Sector Cybersecurity Goals (CPGs) that consist of cybersecurity measures that will have the greatest impact on security along with an update to the HIPAA Security Rule to add new cybersecurity requirements.

Ransomware 121

Ransomware HIPAA Hospitals Compliance 121

HIPAA Journal

OCTOBER 24, 2022

A relatively new data extortion and ransomware gang known as Daixin team is actively targeting U.S. healthcare organizations, prompting a warning from the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS).

Ransomware 71

Ransomware Governance HIPAA Public Health 71

HIPAA Journal

JULY 20, 2022

Several healthcare providers submitted breach reports in June 2022 due to the ransomware attack on the HIPAA business associate, Eye Care Leaders. At least 37 healthcare providers are now known to have been affected by that ransomware attack and more than 3 million records are known to have been exposed in the attack.

Electronic Medical Records 109

Electronic Medical Records Ransomware HIPAA Hospitals 109

HIPAA Journal

JUNE 14, 2023

The Health Sector Cybersecurity and Coordination Center (HC3) has compiled a profile of the FIN11 threat group (TA505/Lace Tempest/Hive0065) which is known to target organizations in the healthcare and public health (HPH) sector. FIN11 also targeted HPH sector organizations during the COVID-19 pandemic.

Ransomware 83

Ransomware COVID-19 Public Health HIPAA 83

HIPAA Journal

AUGUST 31, 2022

The Health Sector Cybersecurity Coordination Center (HC3) has issued a warning to the healthcare and public health sector (HPH) about one of the most capable and aggressive cybercrime syndicates currently in operation – Evil Corp. Cybercrime Syndicate appeared first on HIPAA Journal.

Ransomware 118

Ransomware Fraud Governance Public Health 118

Total HIPAA

DECEMBER 8, 2020

Here at Total HIPAA, we pride ourselves on providing helpful resources for all businesses striving for HIPAA compliance. As we approach the end of 2020, we reflect on the most popular HIPAA topics this year. CCPA & HIPAA: Important Intersections. Ransomware Attacks Directed at Businesses Grow.

HIPAA 40

HIPAA COVID-19 Ransomware Compliance 40

HIPAA Journal

MARCH 2, 2022

The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center (HC3) has issued a warning to the U.S. health sector about potential cyber threats that could spill over from the conflict and affect U.S. healthcare organizations.

US Department of Health and Human Services 120

US Department of Health and Human Services Ransomware Governance HIPAA 120

HIPAA Journal

JULY 21, 2022

Department of Justice has announced that around $500,000 in Bitcoin has been seized from North Korean threat actors who were using Maui ransomware to attack healthcare organizations in the United States. The new ransomware variant was discovered during an investigation of a ransomware attack on a hospital in Kansas in May 2021.

Ransomware 96

Ransomware HIPAA Hospitals Public Health 96

HIPAA Journal

AUGUST 26, 2022

The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center (HC3) has issued a warning to the Healthcare and Public Health Sector (HPH) about a relatively new ransom threat group called Karakurt, which is known to have conducted hacking and extortion attacks on the HPH sector.

Ransomware 124

Ransomware Hospitals Public Health HIPAA 124

HIPAA Journal

JUNE 9, 2023

Nova Scotia Health has confirmed that the personal information of up to 100,000 employees was stolen in the attack. Mandiant confirmed to The HIPAA Journal that it has seen evidence of data exfiltration at multiple companies and that targeted applications were infected with a webshell called LEMURLOOT. On June 7, 2023, the U.S.

Ransomware 87

Ransomware HIPAA Public Health Governance 87

HIPAA Journal

FEBRUARY 23, 2023

The attacks have prompted the Health Sector Cybersecurity Coordination Center (HC3) to issue a further warning about the Clop ransomware group, which claimed responsibility for the attacks. In these attacks, the group said it could have deployed ransomware but chose not to do so, instead opting for an extortion-only approach.

Ransomware 60

Ransomware Licensing Public Health HIPAA 60

HIPAA Journal

OCTOBER 10, 2022

Recently, the Health Sector Cybersecurity Coordination Center (HC3) issued a white paper warning the healthcare and public health sector (HPH) about these living-off-the-land techniques to raise awareness of the threat and explain the risks of using certain tools.

Ransomware 95

Ransomware Public Health HIPAA 95

Total HIPAA

MARCH 17, 2020

The World Health Organization (WHO) has declared the recent coronavirus outbreak, otherwise known as Coronavirus Disease 2019 (COVID-19) , a public health emergency of international concern. Organizations that must comply with HIPAA should have a Disaster Recovery Plan in place for such a situation.

COVID-19 40

COVID-19 HIPAA Compliance Ransomware 40

HIPAA Journal

APRIL 18, 2023

The Department of Health and Human Services’ Cybersecurity Task Force has shared new resources to help healthcare and public health (HPH) sector organizations combat the growing number of cyberattacks targeting the sector and improve their cybersecurity posture.

HIPAA 65

HIPAA Ransomware Hospitals Public Health 65

HIPAA Journal

AUGUST 23, 2022

The Health Sector Cybersecurity Coordination Center has issued a warning about social engineering and voice phishing (vishing) attacks on the healthcare and public health (HPH) sector. The post HC3 Warns of Increase in Vishing Attacks and the Dangers of Social Engineering appeared first on HIPAA Journal.

Ransomware 102

Ransomware COVID-19 Public Health HIPAA 102

HIT Consultant

AUGUST 13, 2023

The size and complexity of cybersecurity attacks today is forcing healthcare providers to outsource these responsibilities to IT professionals who can maintain a robust defense to ensure the privacy of patient records and compliance with regulatory standards like the Health Insurance Portability and Accountability Act (HIPAA).

Ransomware 98

Ransomware Fraud Health Insurance Public Health 98

HIPAA Journal

APRIL 6, 2023

The new KillNet leader operates under the name Blackside, and claims to have experience in ransomware, phishing, and crypto theft attacks. Healthcare Organizations appeared first on HIPAA Journal. The post KillNet Hacktivist Group Continues to Target U.S.

Ransomware 101

Ransomware Hospitals Health Insurance Public Health 101

HIPAA Journal

JULY 24, 2023

While the COVID-19 public health emergency has officially been declared over, many organizations have continued to support remote working, with 48% of employees continuing to spend at least some of the week working remotely and 62% of employees believing their employers will support remote working in the future.

COVID-19 86

COVID-19 Ransomware Public Health HIPAA 86

HIPAA Journal

APRIL 25, 2023

Data breaches have recently been announced by Santa Clara Family Health Plan, United Steelworkers Local 286, Robeson Health Care Corporation, Two Rivers Public Health Department, and NewBridge Services. The post 277,000 Santa Clara Family Health Plan Members Affected by GoAnywhere Hack appeared first on HIPAA Journal.

Health Insurance 83

Health Insurance Public Health Ransomware Fraud 83