FBI Co-deputy Director Andrew Bailey discussed a rise in cyber and physical threats impacting health care. He discussed health care as the top critical infrastructure sector cybercrime target in 2025, how ransomware attacks have increased in recent years and how they have largely been conducted by Russian-speaking ransomware-as-a-service groups.  
 
“When these attacks hit, the downstream effects move very quickly,” Bailey said. “Ambulances are diverted from the hospitals that can no longer receive them. Elective surgeries are postponed; time-sensitive treatments, oncology, cardiac care — all delayed. At that point, we’re no longer talking about a data crime. We’re talking about physical harm to patients and the American public.” 
 
He also discussed violence against health care workers, as well as the rise of artificial intelligence and its use by malicious actors. In a conversation with John Riggi, AHA national advisor for cybersecurity and risk, Bailey said one concerning factor is that cyber actors have begun using AI to automate activities such as reconnaissance and intrusion, ultimately leading to the exploitation of systems. 
 
“The reconnaissance and the early sequencing can be done in an automated fashion now, which frees up the individuals behind the keyboard to do other things, so they can multitask — that’s problematic,” Bailey said. “Now the good news is that [if] the bad guys can use it on offense, we can use it on defense.” 

Headline
The National Security Agency Oct. 8 released guidance for critical infrastructure organizations that recommends adopting high-impact zero trust strategies to…
Headline
The FBI and Secret Service released an advisory Oct. 6 warning of ongoing activities by FortiBleed, a global credential-compromise campaign used by threat…
Headline
In a new blog, John Riggi, AHA national advisor for cybersecurity and risk, and Scott Gee, AHA deputy national advisor for cybersecurity and risk, highlight…
Headline
The Senate passed the Health Care Cybersecurity and Resilience Act on Sept. 30 by unanimous consent. The bipartisan bill seeks to improve coordination between…
Headline
The AHA provided comments Sept. 30 to the Senate Homeland Security and Governmental Affairs Subcommittee on Disaster Management, District of Columbia and…
AHA Cyber Intel
While we may feel inundated with alarming news about escalating cyber threats against healthcare organizations, there is also some good news. Let’s explore how…