Ascension, one of the largest private healthcare systems in the United States, has taken some of its systems offline to investigate what it describes as a \u2018cybersecurity event\u2019.<\/p>\n\n\n\n
A statement from the company reads: \u201cAscension continues to make progress towards restoration and recovery following the recent ransomware attack. We continue to work with industry leading forensic experts from Mandiant to conduct our investigation into this attack and understand the root cause and how this incident occurred.<\/p>\n\n\n\n
\u201cIn parallel, we have brought in additional cybersecurity experts from Palo Alto Networks Unit 42 and from CYPFER to help supplement our rebuild and restoration efforts. We are focused on getting systems back up and running as safely and as quickly as possible. We are also working on reconnecting with our vendors with the help of our recovery experts.<\/p>\n\n\n\n
\u201cOur priority remains providing quality patient care and relaying up-to-date information when available as we work through this recovery process.\u201d<\/p>\n\n\n\n
Cybersecurity experts have been responding to the attack.<\/p>\n\n\n\n
Tamara Kirchleitner, Senior Intelligence Operations Analyst at Centripetal, said: “As hospitals increasingly rely on technology to build their infrastructure, divisions such as patient care, research, billing and more become more vulnerable to external threats and cyberattacks.<\/p>\n\n\n\n
\u201cThis not only jeopardises data and network security but also endangers the lives of patients themselves.\u201d<\/p>\n\n\n\n
Erfan Shadabi, Cybersecurity Expert at comforte AG, said: \u201cMedical information is among our most sensitive data. We all have a distinct right to data privacy and expect that our healthcare providers are doing everything they can to fulfil that right. So when attacks hit healthcare institutions – as it has with Ascension\u00a0– we in data-heavy industries should all take a pause and consider the implications of our cybersecurity choices.<\/p>\n\n\n\n
\u201cThe best way to prevent the pain suffered by both victims, the enterprise and the individual, is to safeguard sensitive records such as medical information through a data-centric approach to data protection. Data-centric methods such as tokenisation replace sensitive data elements with innocuous tokens that maintain the analytic value of the data while obscuring the actual sensitive information itself. It becomes non-identifying and, therefore, worthless in the hands of threat actors, while remaining fully workable by the enterprise.\u201d<\/p>\n\n\n\n
Anne Cutler, Cybersecurity Expert at Keeper Security, said: \u201cHealthcare providers stand to experience some of the worst consequences of cyberattacks and data breaches, as they manage immense amounts of sensitive personal and health information about staff and patients. While not a lot of details are available about the extent of the unusual activity Ascension detected or what information, if any, has been compromised, this security event highlights the need for healthcare organisations large and small to prioritise strengthening their cybersecurity posture.<\/p>\n\n\n\n
\u201cThreats are continuously evolving, and while not every attack can be prevented, steps can be taken to mitigate the access of cybercriminals and minimise impacts on systems, data and operations. The most effective method for minimising sprawl if an attack does occur is by investing in prevention with zero-trust privileged access management that will limit, if not altogether prevent, a bad actor\u2019s access.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"
Ascension, one of the largest private healthcare systems in the United States, has taken some of its systems offline to investigate what it describes as a \u2018cybersecurity event\u2019. A statement from the company reads: \u201cAscension continues to make progress towards restoration and recovery following the recent ransomware attack. We continue to work with industry leading […]<\/p>\n","protected":false},"author":18,"featured_media":37639,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[17,43],"tags":[6231,81,322,149],"class_list":["post-37270","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-enterprise-security","category-top-stories","tag-ascension","tag-healthcare","tag-ransomware","tag-us"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/37270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/comments?post=37270"}],"version-history":[{"count":2,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/37270\/revisions"}],"predecessor-version":[{"id":37638,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/37270\/revisions\/37638"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media\/37639"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media?parent=37270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/categories?post=37270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/tags?post=37270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}