Cybersecurity

Cyber Threat Intelligence, Alerts and Reports
As part of the AHA’s commitment to helping hospitals and health systems prepare for and prevent cyber threats, we have gathered the latest government cyber threat intelligence and alerts and Health Information Sharing and Analysis Center (H-ISAC) reports.
You may be asked to enter your AHA member credentials to view certain reports and intelligence alerts.
Cybersecurity & Risk Advisory
Learn how AHA can help hospitals and health systems prepare for and mitigate cyber threats through the expertise of John Riggi, AHA’s National Advisor for Cybersecurity and Risk.
Between at least June 2018 and January 2019, Nigerian cyber criminals have targeted and accessed healthcare claims payment processors throughout the US to replace legitimate customer banking and contact information with accounts controlled by the cyber criminals.
This two-part special report explores what hospital and health-system boards can do to reduce cyber risks and vulnerabilities.
This PIN has been released TLP: GREEN: The information in this product is useful for the awareness of all participating organizations within their sector or community
View the full Alert here.
The Healthcare and Public Health Sector Coordinating Council (HSCC) today released a consensus-based guide to developing, deploying and supporting cyber-secure medical devices and health information technology across the product lifecycle and improving information sharing between manufacturers and…
The partnership between the SANS Institute and the American Hospital Association (AHA) draws on a shared mission to ensure that information security professionals in critical organizations are skilled and prepared to protect patients and health systems. Through this program, qualified AHA members…
The National Counterintelligence and Security Center this week released resources to help the private sector protect American innovation and computer networks from growing threats from foreign intelligence entities.
A Department of Health and Human Services task group recently released cybersecurity guidelines for the health care field, as mandated by the Cybersecurity Act of 2015.
As of November 2018, more than 700 Industrial Control Systems (ICS) belonging to US-based networks accepted connections through port 1911 to the Tridium Niagara Framework’s Fox protocol from random public IP addresses.
A settlement agreement with Pagosa Springs (Colo.) Medical Center that the Department of Health and Human Services’ Office for Civil Rights announced this week highlights important, but perhaps sometimes overlooked, privacy and security risk issues associated with access to electronic protected…
Republicans on the House Energy and Commerce Committee Friday released a report summarizing initial efforts by its Oversight and Investigations Subcommittee to address the nation’s cybersecurity challenges.