The computer systems at Crystal Run Healthcare are facing a cyberattack.
See also: Cuba ransomware: Attack on Wisconsin health department
“We are committed to protecting our patient information and maintaining the integrity of our information systems,” said spokeswoman Amy Charley. “We actively monitor systems to react and respond quickly to any situation.”
On the company’s website’s homepage , there is a notice that the company is experiencing a “ System Outage ” and is working to resolve the issue. The notice also tells website visitors to call 911 for medical emergencies.
Crystal Run Healthcare, based in the city of Wallkill, is a multi-specialty medical practice group serving the Hudson Valley and Lower Catskills.
The most common types of cyberattacks targeting healthcare organizations are:
- Phishing: This attack is usually done via email or text message, where the malicious sender pretends to be legitimate and asks the recipient to reveal sensitive information, such as passwords or credit cards.
- Malware: This is a program that enters a system and causes damage or theft of information. The most common types of malware include viruses, spyware, and ransomware.
- DDoS attack: In this attack, the malicious user overloads the healthcare organization’s network with massive data traffic, making it impossible for legitimate users to access the system. This can lead to service disruption and cause serious impacts on healthcare delivery.
See also: Authorities warn the healthcare sector about Akira ransomware
Healthcare organizations can take a number of preventative measures to protect themselves from cyberattacks. One of the most important measures is staff training. Healthcare organizations should invest in training and educating their staff about threats and the basic security practices they should follow. This includes training staff on how to recognize and respond to phishing, malicious emails, and social engineering techniques.
Another important preventive measure is to strengthen the cybersecurity of systems and networks. Healthcare organizations should implement security policies and procedures to protect their data and prevent unauthorized access. This includes using strong passwords, keeping up to date with and applying security patches, and installing anti-malware programs.
See also: Cybersecurity Toolkit for Healthcare: CISA's new security tool for hospitals
Additionally, healthcare organizations should implement a multi-layered approach to cybersecurity. This includes installing and maintaining up-to-date security software, isolating sensitive data, performing regular backups, and monitoring and detecting network anomalies. In addition, collaborating with external experts and developing a response plan in the event of a security breach are important protective measures.
Source: midhudsonnews
