Cybersecurity

Cyber Threat Intelligence, Alerts and Reports

As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.

You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.

Cybersecurity & Risk Advisory

Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.

Learn More

Health-ISAC sponsored and facilitated a tabletop exercise with participants from Health-ISAC members and United States Government (USG) agencies in July 2022, marking the third annual iteration of the Hobby Exercise.
During this AHA Leadership Scan, John Riggi, AHA’s National Advisor for Cybersecurity and Risk, moderates a panel of CISOs from AHA Member hospitals to explore how health care organizations can navigate the fear, uncertainty and doubts (FUD) related to cyber threats. The panel will share best…
The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center Nov. 21 warned of a human-operated ransomware threat targeting larger organizations, with compromised targets observed in the health care and public sectors.
A daily ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.
H-ISAC TLP Green Announcement: November 2022: Health-ISAC Cyber Threat level maintained at Blue (Guarded).
Executive Summary Lorenz is human-operated ransomware that has been in operation for approximately two years. In that time, HC3 is aware of the compromise of healthcare and public sector targets. It is used to target larger organizations in what is called “big-game hunting”, and publishes data…
The FBI, Cybersecurity & Infrastructure Security Agency, and Department of Health and Human Services yesterday recommended actions to reduce the risk of compromise from Hive ransomware, which has victimized over 1,300 health care and other organizations since last June.
A daily ransomware tracker as TLP:GREEN for purposes of increasing ransomware threat awareness.