HC3 TLP White Report: Health Sector Cybersecurity: 2021 Retrospective and 2022 Look Ahead – March 3, 2022

Agenda

• Introduction/Overview
• Healthcare Cybersecurity up to 2021
  • Timeline of Events and Incidents
• Healthcare Cybersecurity Throughout 2021
  • Detailed Timeline of Events and Incidents
• Healthcare Cybersecurity – 2022 and Beyond
  • How to Move Forward
• Conclusions
• References

Introduction/Overview

• Cybercriminals and nation-states have engaged in cyberattacks against healthcare organizations for years
  • What is different about today?
  • What will we have to be concerned with tomorrow?
• In recent years and continuing today:
  • Ransomware continues to be relevant despite efforts to combat it
  • Data breaches are as common as ever
  • Vulnerabilities continue to be released; phishing and RDP continue to be compromised
• What’s different about today?
  • Threat actors continue to evolve and become more sophisticated and effective
    • Distributed attack vectors are increasingly used
      • Managed service provider compromise
      • Supply chain compromise
      • Open-source software compromise
  • Governments are increasingly aggressive in fighting back
    • Despite this, healthcare organizations have as big a role as ever in defending themselves

View the detailed report below.