Morning Headlines 2/16/23

Morning Headlines 2/16/23

February 15, 2023 Headlines No Comments CPSI Announces Fourth Quarter and Full Year 2022 Results
CPSI reports Q4 results: revenue up 12%, adjusted EPS $0.61 versus $0.58, beating analyst expectations for both.
Cyber attack exposes personal data of approximately 1 million Community Health Systems patients
Hospital management company Community Health Systems (TN) begins notifying patients of a cyberattack on its third-party cybersecurity vendor Fortra, which may have exposed patient information.
CommonSpirit Health Releases FY2023 Q2 Financial Results
CommonSpirit Health reports a $474 million Q2 operating loss, some of which it attributes to the October ransomware attack that took its systems offline for nearly a…

Continue Reading
Healthcare systems could face new DPRK ransomware tactics

Healthcare systems could face new DPRK ransomware tactics

Government agencies from the United States and the Republic of Korea are highlighting new ransomware tactics they’ve seen, which they say are used to conceal the affiliation of Democratic People’s Republic of Korea hackers working to stage attacks against U.S. and South Korean healthcare organizations and critical infrastructure.WHY IT MATTERS
The new cybersecurity advisory, Ransomware attacks on critical infrastructure fund DPRK malicious cyber activities, details both North Korea’s historically and recently observed tactics, techniques and procedures and indicators of compromise.
The additional observed TTPs “span phases from acquiring and purchasing infrastructure to concealing DPRK affiliation,” according to the United States National Security Agency, the Federal…

Continue Reading
Cyberattack round-up: Financial warnings and new threats to hospitals

Cyberattack round-up: Financial warnings and new threats to hospitals

Hospital financial ratings remain vulnerable to cyberattack fallout, according to a new assessment from Fitch Ratings. Meanwhile, hacktivists and ransomware gangs are recycling ransomware strains, and hacker affiliates are offering bigger payouts. Those are just a few of the healthcare cybersecurity trends we’re watching this week.Coordinated KillNet DDoS attacks highlight potential for ratings dips
Fitch Ratings says the recent coordinated distributed denial-of-service attacks on hospital websites such as ChristianaCare’s aren’t likely to drive any downgrades at this time, but cyberattacks that compromise service and affect a hospital’s financial profile could.
Last week the pro-Russian hacktivist group KillNet, known for its DDoS attacks on critical infrastructure in nations supporting…

Continue Reading
FBI disrupts Hive ransomware: Hospitals among those spared

FBI disrupts Hive ransomware: Hospitals among those spared

Beginning this past July, the Federal Bureau of Investigation – with the assistance of overseas law enforcement agencies from Canada to Lithuania and victimized asset operators across various sectors – seized the servers and websites of the Hive ransomware network, FBI Director Christopher Wray announced on Thursday. The disruption makes hospitals safer against high-impact ransomware attacks, says the American Hospital Association.
Hive networks seized
The U.S. Attorney General Merrick Garland said yesterday that on the evening of January 25, a months-long investigation led to the seizure of Hive’s websites and servers. 
The FBI first gained access to Hive’s computer networks, then captured its decryption keys and offered…

Continue Reading
NextGen Healthcare hit by BlackCat ransomware

NextGen Healthcare hit by BlackCat ransomware

The group, also known as ALPHV and suspected to be a successor to BlackMatter, has demanded ransoms as high as $1.5M with affiliates keeping 80-90%, according to the Office of Information Security at U.S. Health and Human Services and the Health Sector Cybersecurity Coordination Center.WHY IT MATTERS
The Russian ransomware group allegedly attacked the EHR vendor NextGen on January 17, The Washington Post reported on Monday. 
“The company says it doesn’t look like the hackers obtained any client data or patient data,” according to the Post.
Healthcare IT News reached out to NextGen for comment and will update this story if it responds.
Claiming responsibility, BlackCat “put…

Continue Reading