North Korean Operative Accused of Hacking into U.S. Healthcare Providers

The man allegedly stole sensitive information and installed ransomware to fund further attacks.

By Jeff Wardon, Jr., Assistant Editor


A North Korean military intelligence operative, Rim Jong Hyok, has been indicted for hacking into U.S. healthcare providers, NASA, military bases and other international entities, according to KSHB. He allegedly stole sensitive information and installed ransomware to fund further attacks. Hyok is accused of laundering money through a Chinese bank to purchase computer servers and support additional cyberattacks on defense, technology and government entities worldwide. These actions have also disrupted patient treatment in American hospitals. 

According to KSHB, Hyok allegedly targeted 17 entities across 11 U.S. states, including NASA and military bases, taking classified information to further North Korea’s intelligence agencies. 

Cyberattacks can come from anywhere, including foreign entities. Healthcare facility managers must keep an eye on their “data drip,” or essentially where their data is being shared to, as Charlie Regan, chief executive officer at Nerds On Site, previously told Healthcare Facilities Today.  

Related: Healthcare Cyber Incidents by the Numbers

“We can go into a company and find out in 15 minutes you have got data going at 195,000 drips of data every minute,” says Regan. “You have got some going to Poland, you have got some going to North Korea and you have got some going to South Africa. You have clients, trusted suppliers or trusted stakeholders in any of those arenas. If not, then you know that you are experiencing data drip. So, facilities managers must keep a non-stop eye out for the data drip because they must be wary of where the data is ending up is trusted and friendly.”   

Additionally, with ransomware attacks such as Hyok used, it is best to keep regular backups of key data so that an organization can still access them even if an attack happens. Ben DeBow, founder and chief executive officer at Fortified, told Healthcare Facilities Today that healthcare organizations must encrypt their data as well. 

“One of the challenging things today to with organizations is they have an immense amount of data which adds to the complexity of how you protect all your data,” says DeBow. “I always focus and work with companies on protecting your most important data that runs the business. I call it your ‘Coca-Cola’ secret. Separate from that is making sure that your backup data strategy is also immutable.” 

Hyok has yet to be arrested. KHSB reports that a reward of $10 million has been offered for information that could lead to him or other foreign government operatives that target U.S. infrastructure. 

Jeff Wardon, Jr. is the assistant editor for the facilities market. 



July 31, 2024


Topic Area: Information Technology , Security


Recent Posts

Case Study: How NYU Langone Rebuilt for Resilience After Superstorm Sandy

Although the damage was severe, it provided a valuable opportunity for NYU Langone to assess structural vulnerabilities and increase facility resilience.


Frederick Health Hospital Faces 5 Lawsuits Following Ransomware Attack

The lawsuits accuse FHH of inadequate cybersecurity, poor breach notification and failing to protect patients from identity theft risks.


Arkansas Methodist Medical Center and Baptist Memorial Health Care to Merge

They have signed a non-binding letter of intent to complete a shared mission agreement to merge the two organizations.


Ground Broken on Intermountain Saratoga Springs Multi-Specialty Clinic

The clinic is scheduled to open and start seeing patients in the fall of 2026.


Electrical Fire Tests Resilience of Massachusetts Hospital

Signature Healthcare Brockton Hospital used opportunity to renovate key systems and components and expand facility operations.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.