North Korean Operative Accused of Hacking into U.S. Healthcare Providers

The man allegedly stole sensitive information and installed ransomware to fund further attacks.

By Jeff Wardon, Jr., Assistant Editor


A North Korean military intelligence operative, Rim Jong Hyok, has been indicted for hacking into U.S. healthcare providers, NASA, military bases and other international entities, according to KSHB. He allegedly stole sensitive information and installed ransomware to fund further attacks. Hyok is accused of laundering money through a Chinese bank to purchase computer servers and support additional cyberattacks on defense, technology and government entities worldwide. These actions have also disrupted patient treatment in American hospitals. 

According to KSHB, Hyok allegedly targeted 17 entities across 11 U.S. states, including NASA and military bases, taking classified information to further North Korea’s intelligence agencies. 

Cyberattacks can come from anywhere, including foreign entities. Healthcare facility managers must keep an eye on their “data drip,” or essentially where their data is being shared to, as Charlie Regan, chief executive officer at Nerds On Site, previously told Healthcare Facilities Today.  

Related: Healthcare Cyber Incidents by the Numbers

“We can go into a company and find out in 15 minutes you have got data going at 195,000 drips of data every minute,” says Regan. “You have got some going to Poland, you have got some going to North Korea and you have got some going to South Africa. You have clients, trusted suppliers or trusted stakeholders in any of those arenas. If not, then you know that you are experiencing data drip. So, facilities managers must keep a non-stop eye out for the data drip because they must be wary of where the data is ending up is trusted and friendly.”   

Additionally, with ransomware attacks such as Hyok used, it is best to keep regular backups of key data so that an organization can still access them even if an attack happens. Ben DeBow, founder and chief executive officer at Fortified, told Healthcare Facilities Today that healthcare organizations must encrypt their data as well. 

“One of the challenging things today to with organizations is they have an immense amount of data which adds to the complexity of how you protect all your data,” says DeBow. “I always focus and work with companies on protecting your most important data that runs the business. I call it your ‘Coca-Cola’ secret. Separate from that is making sure that your backup data strategy is also immutable.” 

Hyok has yet to be arrested. KHSB reports that a reward of $10 million has been offered for information that could lead to him or other foreign government operatives that target U.S. infrastructure. 

Jeff Wardon, Jr. is the assistant editor for the facilities market. 



July 31, 2024


Topic Area: Information Technology , Security


Recent Posts

Creating Healthcare Campus Master Plans That Allow Movement and Respite

A thoughtful campus master plan looks beyond buildings to the corridors and transitional spaces that shape how people experience healthcare environments.


Aspirus Health Celebrates Opening of Chippewa Falls Hospital and Clinic

The new facility combines hospital and clinic services in one location and is designed to support patients with coordinated, patient-centered care.


AdventHealth to Open Aurora Highlands Medical Campus

AdventHealth Aurora Highlands includes a 24-hour freestanding emergency room, outpatient imaging and clinic services.


The Future of Healthcare Facility Construction Projects

Brian Cowperthwaite highlights the invisible work that impacts everyone who walks through a healthcare facility.


Arnprior Regional Health Upgrades Building Controls to Improve IEQ

Case study: They wanted to improve the hospital facility’s IEQ to support patient care and reduce long-term operating costs.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.