The Department of Health and Human Services today alerted the health care and public health sector to an Oct. 24 ransomware attack against at least 20 news and real estate websites in Eastern Europe and Japan. The malware campaign, called “Bad Rabbit” after the first two words on the ransom page, redirected victims to a fake Adobe Flash player update that contained the ransomware. According to HHS, the attack does not seem to be targeting the United States or health care sector, although some U.S. entities were affected. Many major anti-virus companies started detecting and blocking the Bad Rabbit malware campaign by Oct. 25, the agency said. Precautionary measures to mitigate ransomware threats include ensuring anti-virus software is up to date and implementing a data backup and recovery plan to maintain copies of sensitive or proprietary data in a separate and secure location, HHS said. For additional resources to reduce and manage cyber risks, visit www.aha.org/cybersecurity.

Related News Articles

Headline
In part one of a new blog, John Riggi, AHA national advisor for cybersecurity and risk, and Scott Gee, AHA deputy national advisor for cybersecurity and risk,…
Perspective
Public
This week, the FBI issued an urgent warning to all users — including hospitals — of a critical security soft spot within Oracle’s E-Business Suite, stating “…
Headline
The Health Sector Coordinating Council Oct. 7 released its Sector Mapping and Risk Toolkit, created to help health care providers and other organizations…
AHA Cyber Intel
As of Oct. 3, 2025, 364 hacking incidents had been reported to the U.S. Department of Health and Human Services Office for Civil Rights, affecting over 33…
Headline
The AHA Oct. 6 released a Cybersecurity Advisory urging immediate action against a critical Oracle E-Business Suite vulnerability that is remotely exploitable…
Headline
The AHA has launched an enhanced Cybersecurity and Risk webpage designed to help health care organizations strengthen their defenses against emerging cyber and…