HHS Alerts Healthcare Organizations to 'Qilin' Ransomware Group

Qilin is known to employ tactics such as spear phishing and double extortion.

By Jeff Wardon, Jr., Assistant Editor


The United States Department of Health and Human Services (HHS) has sounded the alarm over the Qilin (also known as Agenda) ransomware-as-a-service (RaaS) offering, which has been in operation since 2022. This group is known for gaining initial access through “spear phishing,” a type of phishing that directly targets a specific person or organization, typically through emails. They are also known for resorting to double extortion, where ransom payments are demanded from victims to prevent data being leaked.  

Ransomware remains a threat to the healthcare and public health sector, as they reportedly filed 249 ransomware-related complaints to the FBI in 2023.  

Given recent ransomware attacks on healthcare organizations such as Ascension, the threat of being victimized by an attack is real and troubling. This is because ransomware attacks can lead to sizeable costs and private data being lost.  

For example, CommonSpirit Health reported a total loss of $160 million for the ransomware attack they suffered in 2022. They also had 624,000 patients’ data stolen from them in that attack.  

However, healthcare organizations can act to protect themselves from and even prevent ransomware attacks. The Center for Internet Security recommends the following steps to limit the impacts of ransomware attacks:  

  1. Regularly maintain backups of data 
  2. Develop procedures and policies 
  3. Review the port settings, consider whether they need to be left open or not 
  4. Configure systems with security in mind 
  5. Regularly update systems  
  6. Train the team to be cybersecurity-oriented 
  7. Put in place an Intrusion Detection System (IDS), which can help look for malicious activity within an organization’s network 

Jeff Wardon, Jr. is the assistant editor for the facilities market. 



June 27, 2024


Topic Area: Information Technology , Security


Recent Posts

Why Cyber Readiness Is the New Standard of Care

In a sector in which digital disruptions are inevitable, the real measure of strength is the ability to deliver safe, reliable care no matter what.


Smarter, Faster, Safer: The Rise of AI in Healthcare Security Technologies

Manufacturers discuss how AI, machine learning and real-time analytics are boosting the speed and accuracy of CCTV monitoring and weapons detection.


The WHO and UNICEF Release New Global Hand Hygiene Guidelines

These are the first global guidelines for hand hygiene in community settings.


Swatting Calls, Hoax Threats Have Real Consequences for Healthcare

A recent report of a shooting at a hospital in California turned out to be a possible swatting incident.


Next Level Announces Expansion of Conroe, Texas Clinic

The expanded facility will offer additional exam rooms, improved patient flow and an enhanced waiting area designed with patient comfort in mind.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

 
 
 
 

Healthcare Facilities Today membership includes free email newsletters from our facility-industry brands.

Facebook   Twitter   LinkedIn   Posts

Copyright © 2023 TradePress. All rights reserved.