The Department of Health and Human Services’ cybersecurity center recently released an advisory about a “ransomware-as-a-service” group called Everest that is now focused on the $4 trillion healthcare industry. According to an emailed newsletter from the American Hospital Association, the group is known to access systems through compromised user accounts and remote access tools. The ransomware is designed to attack by initially gaining unauthorized access to an organization’s data through credential theft. The attacker then …
Read MoreHospitals Cancel Procedures During CrowdStrike Crash
Last week’s CrowdStrike software crash left some health systems in emergency downtime situations, while others ended up delaying patients’ medical procedures, according to Healthcare Dive. The crash has been characterized in Becker’s as “worse than a cyberattack.” The American Hospital Association also said: “These disruptions are resulting in some clinical procedure delays, diversions, or cancellations. Impact is also being felt indirectly as a result of local emergency call centers being down.” Some scheduling, check-in, and …
Read MoreCyberattack Costs UnitedHealth $2.45B Against Profitable Q2
UnitedHealth Group—the parent company of Change Healthcare, which is still reeling from a massive data breach in February—raised its forecast regarding the financial impact of the cyberattack to as much as $2.45 billion on the year. That’s more than double its previous estimate. Meanwhile, UnitedHealth reported Q2 profits of $4.2 billion and revenue increases of nearly 7%, according to Healthcare Dive. After input from federal officials a few weeks ago, the company was put on-task …
Read MoreAscension Wrestling With Cyberattack
Ascension Healthcare, with 140 hospitals and more than 50 urgent cares in 19 states, was impacted by a cyberattack earlier this month, forcing ambulances to divert and pharmacies to shut down. The system disconnected from its Epic EHR, which caused long emergency department wait times and care delays. Ascension has not given a timeline for when its systems will be fully restored, according to Healthcare Dive on its cyberattack state-by-state tracker. How much: When Change …
Read MoreEducation is Key to Avoiding Increasingly Sophisticated Cyber Crime
Urgent message: As digital communication becomes more integral to our daily lives and job functions, cybercriminals are increasingly employing nefarious social engineering tactics like “phishing” to steal our valuable personal, professional, and financial information. Urgent care employees at every level should be trained to recognize phishing scams, and how to effectively safeguard themselves and their organizations from attack. Alan A. Ayers, MBA, MAcc is Chief Executive Officer of Velocity Urgent Care and is Practice Management …
Read MoreUrgent Care Beware: Healthcare is the Top Target for Cyberattacks
New data from IBM shows the healthcare industry was the top target of cyberattacks last year, outpacing financial services, manufacturing, and even government agencies. More than half of the attacks were the result of a healthcare worker innocently giving system access to individuals whose motives were not so innocent, or attributed to poor compliance with an organization’s own cybersecurity policies. At least 100 million healthcare records were compromised as a result in 2015. Such breaches …
Read More