Hospital held hostage by hacker – can it happen?

March 30, 2016

33016hackers640

It already has. And, if you ever wondered why security experts stress not to open links or attachments in unfamiliar emails, this is the reason!

Hollywood Presbyterian Medical Center, a 434-bed private hospital in Los Angeles, recently paid $17K to a hacker who seized control of the hospital’s computer system and returned access only in exchange for the ransom. As the name implies, ransomware locks a network by encrypting files and the perpetrator extorts a victim to obtain the decryption key.

How did it happen?

The attack likely resulted when a hospital staffer clicked a malicious link or attachment that spread the malware throughout the network despite the presence of sophisticated malware controls. Most cyberattacks start when a person opens an email link or attachment from someone they don’t know.

Healthcare at risk

While cyberattacks on hospitals are increasingly common, ransom attacks are relatively rare. But, that might be changing:

  • Ransomware attacks have occurred recently at health care facilities in Texas and Germany
  • The FBI says there has been a “definite uptick” in ransomware use by cybercriminals
  • McAfee Labs predicts ransomware attacks will increase in 2016

What can employees do?

Employees account for 98 percent of all data breaches in the enterprise. That means employee behavior influences our security profile more than any hardware or software tools. What is the best defense against cyberattacks? Do not click unknown links or attachments. Click here to read more about how to help protect Texas Children’s from cyberattacks!