HIPAA Journal

APRIL 30, 2024

The medical device manufacturer Livanova, the Massachusetts community behavioral health center Aspire Health Alliance, and Santa Rosa Behavioral Healthcare Hospital in California have experienced ransomware attacks that exposed patient data. The LockBit ransomware group claimed responsibility for the attack.

Ransomware 96

Ransomware Licensing Health Insurance HIPAA 96

HIPAA Journal

JULY 24, 2023

A recent analysis of ransomware activity by NCC Group’s Global Threat Intelligence team shows a major spike in cyberattacks by ransomware groups in June, with attacks occurring at 221% the level of June 2022 with 434 recorded attacks in the month.

Ransomware 88

Ransomware HIPAA 88

Becker's Health IT

JUNE 1, 2023

Since the start of 2023, 15 healthcare systems operating 29 hospitals have been targeted by a ransomware incident, BankInfoSecurity reported May 31.

Ransomware 98

Ransomware Hospitals 98

Fierce Healthcare

SEPTEMBER 12, 2024

Lehigh Valley Health Network has come to a $65 million class-action lawsuit settlement stemming from a 2023 ransomware attack that led to hundreds of patients’ nude medical record photos being post | After the nonprofit system refused to meet a ransomware gang's demands, over 600 patients' nude medical record photos were posted online.

Ransomware 126

Ransomware 126

HIPAA Journal

JUNE 6, 2023

The eagerly anticipated Verizon 2023 Data Breach Investigations Report ( DBIR ) has been published – An annual report that provides insights into the current threat landscape and data breach trends. of data breaches – a slight increase in ransomware incidents from last year and a slight decrease in ransomware-related data breaches.

Ransomware 96

Ransomware HIPAA 96

Becker's Health IT

JANUARY 3, 2024

Health systems experienced 46 ransomware attacks in 2023, up from 25 in 2022 and 27 in 2021, as hackers continue to bedevil the industry, cybersecurity firm Emsisoft reported.

Ransomware 113

Ransomware 113

HIPAA Journal

MAY 1, 2023

The Health Sector Cybersecurity and Coordination Center (HC3) has issued a fresh ransomware warning to the healthcare and public health (HPH) sector following a spate of attacks on the HPH sector in April by the Clop and LockBit ransomware groups. LockBit ransomware was deployed in some of the attacks. 21.2.11, and 22.0.9

Ransomware 115

Ransomware Public Health HIPAA 115

HIPAA Journal

MAY 25, 2023

CommonSpirit Health has provided an updated estimate on the cost of its October 2022 ransomware attack, which is expected to increase to $160 million. The ransomware attack was detected by CommonSpirit Health on October 2, 2022, forcing systems to be taken offline. billion, and $25.6 billion for the 9 months to March 31.

Ransomware 123

Ransomware HIPAA Hospitals 123

HIPAA Journal

APRIL 22, 2024

At this stage, Octapharma has yet to provide any further details about the attack, such as whether ransomware was used to encrypt files, and said further information will be released as the investigation progresses. BlackSuit is a relatively new ransomware operation that was discovered in May 2023.

Ransomware 114

Ransomware Public Health HIPAA Governance 114

Becker's Health IT

MAY 14, 2024

"Singing River Health System notifies patients of 2023 ransomware attack compromising protected health information. Learn more about the incident and its impact

Ransomware 103

Ransomware 103

Becker's Health IT

SEPTEMBER 12, 2024

has agreed to a proposed $65 million settlement in a class-action lawsuit related to a 2023 ransomware attack that exposed the medical records of 134,000 patients, according to a Sept. Lehigh Valley Health Network, based in Allentown, Pa., 11 report by The Times Tribune.

Ransomware 115

Ransomware 115

HIPAA Journal

DECEMBER 30, 2022

A settlement has been proposed by Scripps Health to resolve a consolidated class action lawsuit – In Re: Scripps Health Data Incident Litigation – to resolve all claims related to its 2021 ransomware attack. The ransomware attack has proven to be incredibly costly for Scripps Health. The post Scripps Health Proposes $3.5M

Ransomware 116

Ransomware HIPAA Licensing Doctors 116

HIPAA Journal

MAY 8, 2023

The cyberattack occurred on April 22, 2023, and the network was rapidly shut down to contain the attack. MMC planned to reopen on a limited basis on May 3, 2023, then restore full operations shortly thereafter; however, the recovery process took longer than planned.

Ransomware 136

Ransomware HIPAA 136

HIPAA Journal

MARCH 10, 2023

Codman Square Health Center in Boston, MA, has confirmed that it was the victim of a ransomware attack in November 2022 in which hackers gained access to the protected health information of 10,161 current and former patients. On February 2, 2023, a business associate was sent an email that included a list of patients’ dental appointments.

Ransomware 120

Ransomware HIPAA 120

HIPAA Journal

FEBRUARY 8, 2024

A new report from Chainalysis has revealed victims of ransomware attacks paid hackers $1.1 billion in 2023 to obtain the keys to unlock their data and to prevent the release of information stolen in the attacks. The researchers believe this anomaly is linked to the Russia-Ukraine war.

Ransomware 94

Ransomware HIPAA Governance Hospitals 94

HIPAA Journal

APRIL 22, 2024

According to the Q1, 2024 ransomware report from the ransomware remediation firm Coveware, ransom payments have fallen to a record low with only 28% of victims opting to pay the ransom to recover files and/or prevent the exposure of stolen data.

Ransomware 102

Ransomware HIPAA 102

HIPAA Journal

JANUARY 26, 2023

Emotet commonly drops the IcedID banking Trojan, which in turn often delivers ransomware payloads. The QakBot operators provide initial access to networks for several ransomware operations. Throughout 2022, LockBit was the most commonly used ransomware variant and remained so throughout the 90-day analysis period.

Ransomware 125

Ransomware HIPAA 125

HIPAA Journal

JUNE 27, 2023

In March 2023, Atlantic General Hospital notified the Maine Attorney General that it had fallen victim to a ransomware attack in which the protected health information of 30,704 individuals was exposed; however, the ransomware attack was far more extensive than was previously thought and the total has been upwardly revised to 136,981 individuals.

Ransomware 106

Ransomware Hospitals Health Insurance HIPAA 106

Healthcare IT Today

MAY 16, 2024

While it’s amazing to consider two breaches and ransomware incidents the size of Change Healthcare and Ascension could happen so closely together, it’s very clear that healthcare is a target and we need to massively increase our investment in security to show we’ve learned from these experiences.

Ransomware 126

Ransomware US Department of Health and Human Services Hospitals Compliance 126

Fierce Healthcare

MAY 9, 2023

Scripps ransomware post-mortem reveals significant ripple effects for nearby hospitals aburky Tue, 05/09/2023 - 16:00

Ransomware 111

Ransomware Hospitals 111

HIPAA Journal

MARCH 9, 2023

In what is believed to be a first, the BlackCat ransomware gang has published naked images of patients that were stolen in one of its attacks on a healthcare organization in an attempt to pressure the victim into paying the ransom. BlackCat is not the only ransomware gang to try new tactics to get victims to pay up.

Ransomware 117

Ransomware Public Health HIPAA 117

Healthcare IT Today

NOVEMBER 22, 2024

According to a report from the Office of the Director of National Intelligence, ransomware attacks on healthcare organizations doubled between 2022 and 2023 , making the healthcare sector one of the fastest-growing targets for cybercriminals. Then malicious actors can either subscribe to use the ransomware or purchase access outright.

Ransomware 72

Ransomware Hospitals COVID-19 Compliance 72

HIPAA Journal

MAY 2, 2024

Ransomware groups target the healthcare sector because a successful attack gives them access to large amounts of sensitive data that can be easily monetized and used as leverage to get a ransom paid. According to Recorded Future, there were 358 ransomware attacks on healthcare organizations in 2023, a year-on-year increase of 46%.

Ransomware 97

Ransomware HIPAA Governance 97

Fierce Healthcare

JANUARY 3, 2023

proposed settlement to compensate victims of 2021 ransomware attack. Tue, 01/03/2023 - 13:13. Scripps Health reaches $3.5M

Ransomware 111

Ransomware 111

Electronic Health Reporter

JANUARY 11, 2024

A new report by Emsisoft documents an increase in ransomware attacks in the US, with 2,207 US hospitals, schools and governments directly impacted in 2023. Illegal copying is prohibited.

Ransomware 91

Ransomware Governance Hospitals 91

HIPAA Journal

MARCH 13, 2023

On December 15, 2023, Revenetics detected a system intrusion and confirmed on December 27, 2022, that the attackers exfiltrated files that included names, dates of birth, clinical information, financial information, procedure and service codes, and healthcare provider and health plan names.

Ransomware 118

Ransomware Fraud HIPAA 118

HIPAA Journal

NOVEMBER 8, 2023

Mulkay Cardiology Consultants at Holy Name Medical Center has recently confirmed that it fell victim to a ransomware attack. The attack was detected on September 5, 2023, when files on its network were encrypted. According to the breach notice, Mulkay was able to rebuild its systems and recover the encrypted files from backups.

Ransomware 109

Ransomware Licensing Health Insurance HIPAA 109

HIPAA Journal

NOVEMBER 7, 2024

The use of ransomware in cyberattacks decreased slightly in the first half of the year; however, the severity of ransomware attacks increased according to the 2024 Cyber Claims Report: Mid-Year Update from cyber insurance and security service provider Coalition. million and $2.5

Ransomware 89

Ransomware Fraud HIPAA 89

HIPAA Journal

APRIL 20, 2023

Healthcare Data Breaches Reported in March 2023 In March, 63 breaches of 500 or more records were reported to OCR, which is a 46.51% increase from February, 6.92% more than the 12-month average, and 40% more breaches than in March 2022. Malicious actors continue to use ransomware in their attacks on healthcare organizations.

US Department of Health and Human Services 111

US Department of Health and Human Services Ransomware HIPAA Hospitals 111

Healthcare IT Today

JANUARY 2, 2023

As we head into 2023, we wanted to kick off the new year with a series of 2023 Health IT predictions. We are going to see an increased demand for privacy-preserving technology in 2023, and therefore more investment in the space. during 2023. Check out our community’s healthcare Security and Risk predictions.

Ransomware 109

Ransomware Fraud Compliance Telemedicine 109

HIPAA Journal

APRIL 21, 2023

Ransomware attacks increased by 91% in March 2023, according to a new analysis by NCC Group. The massive increase was due to the zero-day vulnerability (CVE-2023-0669) in Fortra’s GoAnywhere MFT file management solution, which was exploited by the Clop ransomware group in 130 attacks on companies over a 10-day period.

Ransomware 102

Ransomware HIPAA 102

HIPAA Journal

FEBRUARY 22, 2023

Largest Healthcare Data Breaches in January 2023 In January there were 13 data breaches involving 10,000 or more records, 8 of which involved hacked network servers and email accounts. The post January 2023 Healthcare Data Breach Report appeared first on HIPAA Journal.

HIPAA 119

HIPAA Ransomware Hospitals Compliance 119

HIPAA Journal

FEBRUARY 22, 2023

A lawsuit has been filed against Freehold Township, NJ-based CentraState Healthcare System over its December 2022 ransomware attack, a few days after the health system started sending notification letters to around 617,000 affected patients.

Ransomware 107

Ransomware Fraud Health Insurance HIPAA 107

HIPAA Journal

MAY 23, 2023

Largest Healthcare Data Breaches Reported in April 2023 As previously mentioned, April saw a major data breach reported that affected 3,037,303 individuals – The third largest breach to be reported by a single HIPAA-covered entity so far this year, and the 19 th largest breach to be reported by a single HIPAA-regulated entity to date.

Ransomware 107

Ransomware HIPAA Medicaid Medicaid 107

HIPAA Journal

MARCH 15, 2023

Cybersecurity and Infrastructure Agency (CISA) has launched a new pilot program in response to the increase in ransomware attacks on critical infrastructure entities. The program is focused on identifying vulnerabilities in Internet-facing systems that are known to have been exploited by ransomware gangs in previous attacks.

Ransomware 97

Ransomware Governance HIPAA Hospitals 97

HIPAA Journal

JUNE 20, 2023

May 2023 was a particularly bad month for healthcare data breaches. More healthcare records have been breached in the first 5 months of 2023 (36,437,539 records) than in all of 2020 (29,298,012 records). The Money Message ransomware group exfiltrated 4.7 This was also a ransomware attack with data theft confirmed.

Ransomware 102

Ransomware HIPAA Compliance Health Insurance 102

HIT Consultant

MARCH 25, 2024

UnitedHealth Group’s technology unit, Change Healthcare, is currently facing an ongoing ransomware attack which has reverberated through healthcare systems and affected prescription deliveries. For example, throughout 2023 about one in three Americans were affected by health-related data breaches.

Ransomware 113

Ransomware US Department of Health and Human Services Regulatory Compliance Compliance 113