Tuesday, June 29, 2021

Still(water) another medical facility breached

 

As of late, I have been tracking more closely the published breaches and their respective industries. The one industry that appears to be in the lead for breaches now are the medical facilities. Generally being in the lead is a good thing, but not in this instance. One of the latest incidences involved the Stillwater Medical Center. One June 13, 2021, they detected the unusual behavior and incident. This was not script kiddie testing out new software just purchased but affected a few systems. Naturally, as a hospital is attacked, the incident response team immediately took to action and began securing the issue. In addition, after the attack was controlled, they began in earnest to work on the forensic review with the help of a firm specializing in forensic work. Law enforcement was also notified. As this was an active attack, certain systems were placed on an off-line status until the immediate issue was resolved.

This reinforces the complete need for cybersecurity, adequate FTE, and budget. While an organization will not be able to defend against every single type of attack now or in the future, and adequate defense in depth is the best course of action.

No comments:

Post a Comment