FBI Warns of Imminent Ransomware Threat to U.S. Hospitals

Federal agencies warn cybercriminals are targeting the U.S. health care system with a wave of new ransomware attacks. 

In a joint alert issued late last month, the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Health and Human Services (HHS) announced they had “credible information of an increased and imminent cybercrime threat to U.S. hospitals and healthcare providers.”

As hospitals around the country face spiking coronavirus cases, they could also face new extortion attempts from ransomware.

The cybercriminals are reportedly using Trickbot malware to infiltrate and then Ryuk or Conti ransomware to lock up IT systems. Data theft and disruption to healthcare services can also occur, the alert stated.

“These issues will be particularly challenging for organizations within the COVID-19 pandemic; therefore, administrators will need to balance this risk when determining their cybersecurity investments,” the agencies said in their alert.

Healthcare organizations have long been targets of hackers, but the situation has grown worse during the coronavirus pandemic.

The FBI, CISA, and HHS encourage organizations to maintain business continuity plans and practice executing essential functions through emergencies, including cyberattacks.

Additionally, the agencies recommend implementing user best practices. According to the alert, those include:

• Focus on awareness and training. Because end users are targeted, make employees and stakeholders aware of the threats—such as ransomware and phishing scams—and how they are delivered. 
• Ensure that employees know who to contact when they see suspicious activity or when they believe they have been a victim of a cyberattack. This will ensure that the mitigation strategy can be employed quickly and efficiently.