The Cybersecurity and Infrastructure Security Agency, Federal Bureau of Investigation, and Department of Health and Human Services Friday said they continue to assess the ransomware threat to the health care sector.

“At this time, there is no additional information to share, but we encourage the healthcare sector to continue sustainable levels of vigilance towards ransomware threats to ensure reliable, required levels of patient care delivery,” the agencies said, referring to their Oct. 28 alert for details. “Unless there is new actionable information, there will not be further updates provided.”

John Riggi, AHA senior advisor for cyber and risk, said, “Based upon conversations with the government, we believe the field’s serious attention to the threat advisory, along with quick implementation of government recommended defensive measures, helped repel a number of ransomware attacks against hospitals and health systems. This is the way it should work — timely and actionable threat intelligence from the government and an immediate response and feedback from the field. The government and the field working together as partners, helped defend patient care services and protect patient data. Please remember, this battle is not over – remain vigilant.”

For more on this and other hospital and health system cybersecurity and risk issues, contact Riggi at jriggi@aha.org.

Headline
A joint advisory issued Oct. 20 by U.S. and international agencies warns of recent activity by the SafePay Ransomware group. The group has been active since…
Headline
Two critical vulnerabilities have been discovered in Hypertext Preprocessor, or PHP, a widely-used open-source scripted language for web development, its…
Headline
John Riggi, AHA national advisor for cybersecurity and risk, and Brett Leatherman, assistant director of the FBI Cyber Division, break down Operation Riptide,…
Headline
The National Security Agency has issued guidance on reducing the risk of simple network management protocol abuse. SNMP consists of a standardized framework…
Headline
Microsoft and Health-ISAC Oct. 15 announced that they disrupted three cybercriminal businesses that provided services to threat actors to attack more than 75…
Headline
The AHA will host a webinar Oct. 20 at 1 p.m. ET that will explore the evolving voice threat landscape — including voice phishing, or vishing, spoofing and…