The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center (HC3) last week advised biotechnology companies specifically and the health care and public health sector generally to review a new report on a malware threat aggressively spreading through the biomanufacturing industry and take appropriation action to protect their information infrastructure. According to HC3, the malware is used to deliver ransomware, “possibly as a diversion for the actual purpose of the attack — intellectual property theft.” 

John Riggi, AHA senior advisor for cybersecurity and risk, said, “This sophisticated technical attack along with a novel strategy to utilize ransomware as a pre-text and diversion to steal biotechnology is a double-barrel cyber threat to health care. Not only will the ransomware attack disrupt and delay important biomedical research, but the theft of such research could have much broader implications. The use of the term Advanced Persistent Threat and the type of data being stolen would suggest to me the involvement of an adversarial nation state, which may seek strategic and economic advantage over the U.S. in the use of such research. Especially in light of the emergence of the omicron strain, we must continue to protect medical research and remember that health security equals economic security, and economic security equals national security.” 

For more information on this or other cyber and risk issues, contact Riggi at jriggi@aha.org. 

Related News Articles

Headline
U.S. and international agencies Feb. 29 urged health care and other critical infrastructure organizations using Ivanti Connect Secure VPN and Ivanti Policy…
Perspective
The cyberattack against Change Healthcare that began on Feb. 21 is the most serious incident of its kind leveled against a U.S. health care organization.Nine…
Headline
Organizations using the National Institute of Standards and Technology’s Cybersecurity Framework as their primary cybersecurity framework report one-third…
Headline
President Biden Feb. 28 directed the Department of Justice to issue regulations to protect personal health and other data from countries known to collect and…
Headline
The FBI, Cybersecurity & Infrastructure Security Agency, and Department of Health and Human Services Feb. 27 released updated recommendations to help…
Headline
Russian state-sponsored cyber actors are using compromised Ubiquiti EdgeRouters to facilitate malicious cyber operations worldwide, the FBI and other agencies…