The AHA Feb. 26 issued a Cybersecurity Advisory highlighting updates on network connectivity issues and indicators of compromise related to the recent cyberattack on Change Healthcare. The Advisory contains information from a Feb. 26 Bulletin issued by the Health Information Sharing and Analysis Center (Health-ISAC), which the AHA works with closely. Change Healthcare, owned by UnitedHealth Group’s Optum unit, began experiencing a cybersecurity issue Feb. 21. 

“Members should prioritize this bulletin as it contains actionable indicators of compromise that should be loaded into network defenses as soon as possible,” said John Riggi, AHA’s national advisor for cybersecurity and risk. “The alert also contains network connectivity guidance based on statements provided by Change Healthcare. We must remember that Change Healthcare is a victim of a cyberattack from an apparent foreign-based cyber adversary. This attack is not only on Change Healthcare but is an attack on the entire health care sector that depends upon the availability of Change Healthcare’s services and technology. We must continue to unite as a sector in defense of our sector, because as we have seen, an attack against one of us is an attack on all of us. We appreciate the ongoing threat intelligence provided by Change Healthcare and the ongoing collaboration with the Health-ISAC and our government partners.” 

For more information on this or other cyber and risk issues, contact Riggi at jriggi@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity

Related News Articles

Headline
“Even before the recent Change Healthcare cyberattack that has left some hospitals fronting millions of dollars in extra costs, a perfect storm of complex…
Headline
The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center (HC3) April 5 released an advisory on the top 10 ransomware groups…
Headline
The AHA has been made aware of a validated IT help desk social engineering scheme that uses the stolen identity of revenue cycle employees or employees in…
Headline
For cybercriminals, the backdoor into the protected systems of hospitals and health systems often comes via a third party. In this second of a two-part…
Headline
The Department of Health and Human Services’ Office of the National Coordinator for Health Information Technology March 27 released for comment through May 28…
Headline
In this first of a two-part conversation with experts from Providence, Adam Zoller, chief information security officer, and Katie Adams, cybersecurity director…