Mitigations for Ransomware Attacks on the HPH Sector

The Healthcare and Public Health Sector are seeing an increase of ransomware attacks across the sector. Please take all necessary precautions to mitigate the risk of being impacted. Ransomware attacks involve using a type of malware that encrypts the victim’s data, making the system inaccessible until a ransom is paid. Oftentimes, the attacker will not bother to unlock the user’s data even after a ransom is paid. Please see the following resources from HHS Health Sector Cybersecurity Coordination Center (HC3), DHS Cybersecurity and Infrastructure Security Agency (CISA) and from the FBI for additional information.

• FBI Flash (May 5, 2020)
• Ryuk Update (January 30, 2020)
• Quick reference infographic on ransomware
• CISA Insights which summarizes key mitigation steps
• CISA’s comprehensive library for ransomware; a number of products ranging from training to mitigation best practices