Ransomware wrought havoc in 2020; sharpen tools, watch vendors to avoid breaches

Why This Topic Matters

Ransomware can disrupt operations, expose sensitive patient information, and create HIPAA breach and sanctions-related exposure. Understanding the general threat patterns and prevention strategies helps organizations strengthen safeguards and reduce the likelihood and impact of a breach.

Article Sections

1. Health IT

   Introduces the broader health IT context and frames ransomware as a significant risk to medical record security. The section sets up the article’s focus on recent trends and practical concerns for health care organizations.

2. New dangers lurk

   Describes how ransomware tactics have evolved and why attacks are especially concerning for health care entities. It addresses broad changes in attacker behavior and the challenges these create for organizations.

3. Is paying ransoms illegal?

   Summarizes the legal and regulatory questions surrounding ransom payments, including federal sanctions concerns. It also touches on general response resources and assistance that may be available to affected organizations.

4. New security tools

   Covers general categories of defensive technology and risk-management practices that organizations may use to strengthen ransomware resilience. The discussion includes higher-level security tools, assessments, and vendor-related safeguards.

5. Nothing like good training

   Focuses on ongoing security hygiene and workforce awareness as part of ransomware prevention. It emphasizes staff education, routine protective measures, and the importance of recognizing suspicious messages.