Rise of Ransomware in Healthcare

1. Rise of Ransomware in Healthcare

2. What is Ransomware? • As more and more healthcare providers, anesthesiologists included, rely on online patient records and portable devices in their medical practices, the importance of understanding cyber-threats will only increase. • Ransomware has recently grown in popularity among cyber criminals. • Once the victim opens an infected website or clicks on an infected advertisement, the malware can encrypt the files on the victim’s computer or connected digital network and render them unusable unless a ransom is paid for the data to be unencrypted. • Ransomware can spread through the system at an alarming rate of less than three minutes and without the correct decryption key, the affected files may be permanently lost. • While ransomware first appeared between 2005 and 2009, the recent advent of digital payment methods such as Bitcoin has allowed ransomware attacks to become more lucrative for criminals.

3. Hospitals are Targets for Ransomware Attacks • Hospitals can be particularly vulnerable due to their dependence on daily access to patient records and lower focus on cybersecurity training. • Publicized accounts of hospitals paying their ransoms may also contribute to their popularity as targets • In February of 2016, the Hollywood Presbyterian Medical Center in Los Angeles paid $17,000 in Bitcoin to have their access restored. • Targeted using a ransomware variant called Locky, which employs phishing campaigns such as mass emails as well as network breaches to steal administrative credentials. • Attacks using Locky also focus on locating the organization’s critical files; by inhibiting access to a shared server, they can bring a halt to the target organization’s activity.

4. Strategies to Prevent Ransomware Attacks • Solutionary suggests that hospitals implement thorough backup and recovery processes as well as ensure that security software is up-to-date. • Norton by Symantec, another security company, recommends that all users enable popup blockers and vet emails to prevent users from accidentally clicking on an infected source. • In the event of ransomware infection, the company recommends victims avoid paying the criminals and also disconnect from the internet to prevent the transmission of personal information to the attackers. • In the case of hospitals, the latter may entail shutting down network operations and reverting to paper records, as Medstar Health did in March 2016 in response to a suspected ransomware attack.

5. Other Strategies to Prevent Attacks • The best strategies may be those focused on preventative measures such as more rigorous cyber security training for employees. • Examples of potential measures, adapted from those by suggested by Health Data Management, are as follows: • Educate the workforce on the risks of ransomware and potential sources. • Keep personal devices separate from the organization’s internal network to minimize security risk. • Create incident response protocols for cyberattacks and run drills to train workers on use of said protocols.

6. Xenon Health and Cybersecurity • Hospitals should also ensure that their partners in hospital management are equally as dedicated to minimizing cybersecurity risks. • Xenon Health has worked with multiple healthcare centers on enhancing their anesthesia services and understands the importance of privacy and cybersecurity to hospitals. • Our overall goal is to improve the efficiency of anesthesia services as well as patient care and satisfaction and we fully embrace taking a multifaceted and technology-aware approach to achieve this goal.

7. To learn more about our comprehensive anesthesia services, visit us at www.xenonhealth.com E-mail us at info@xenonhealth.com Call 888-894-5143