山景城医院

2023年5月31日

2023年5月19日,遵守合规救护车被转移到其他设施;诊所护理有限Marianne Kolbasuk麦基(HealthInfoSec) 5月31日,2023年获得批准爱达荷瀑布社区医院是转移救护车及邻近的山景城医院应对网络攻击本周早些时候发现的。(图片:爱达荷瀑布社区医院)社区医院及其附属诊所在爱达荷州农村转移救护车和病人其他设施从周一发现的网络攻击中恢复过来。事件影响44-bed山景城医院和88个床位的爱达荷州社区医院,共享相同的校园和一些共同的主人。也影响了一些合作诊所在爱达荷瀑布,这是一个乡村社区人口约68000。爱达荷瀑布社区医院,联合医院急诊科的校园,还是周三把救护车转移到其他医院。诊所与医院合作也限制了一些病人服务。山景城RediCare说,诊所的网站是“目前关闭由于网络攻击网络上计算机系统导致我们倒下的。”An Idaho Falls Community Hospital spokesman on Wednesday told Information Security Media Group that the hospitals are still addressing the cyber incident. "Patient safety is our top priority," he said. The affected facilities have reverted to using paper for patient charting, as the electronic medical records and other IT systems have been taken offline during the incident response, he said. Right now there are no projections on when IT systems will be back to operating normally. "We're making sure the systems are flushed," the spokesman said. He declined to say whether the incident is believed to involve ransomware. Bigger Problems Security firm Emsisoft has counted 15 healthcare systems operating 29 hospitals that have been hit with ransomware incidents so far in 2023. Data was stolen from 12 of the 15 healthcare organizations affected. "While hospitals tend to downplay the impact of cyberattacks, they do represent a very real risk to patient safety - and that's perhaps especially true when patients in need of emergency care are redirected," said Brett Callow, threat analyst at Emsisoft. Cyberattacks continue to afflict healthcare sector entities of all types and sizes, but the incident affecting the Mountain View and Idaho Falls Community hospitals and affiliated clinics spotlights the immense cyber challenges that many small and rural hospitals face. "Small and rural hospitals have so many competing priorities," said Kate Pierce, the former longtime CIO and CISO of North Country Hospital, a 25-bed community hospital in Vermont. "They have a much smaller staff and a lot of times they just don't have the resources in house to address their cyber needs," Pierce told Information Security Media Group. "Those cyber needs have grown so quickly, and they're so abundant now that they often just can't keep up with the needs of protecting their environment," said Pierce, who is currently virtual information security officer and executive director of the subsidy program at Fortified Health Security. "We're getting past where rural hospitals used to feel like, 'Oh, nobody's going to target us because we're rural.' They're starting to realize now that it doesn't matter where you are in the world, or whether you're rural or you're a large facility. You can still be attacked by cybercriminals." The lack of cyber talent that many small, rural facilities struggle with is a problem during disruptive attacks - and that has caught the attention of Congress. Pierce was among witnesses who testified in March at a Senate Homeland Security and Governmental Affairs Committee hearing examining the cyber challenges faced by the healthcare sector (see: Healthcare Leaders Call for Cybersecurity Standards ). Among other proposals, the bill would require the Cybersecurity and Infrastructure Security Agency to develop a comprehensive cybersecurity workforce development strategy for healthcare facilities located in "non-urbanized" areas that provide inpatient and outpatient care services, such as primary care, emergency care and diagnostic services. "Rural hospitals do not necessarily have a large talent pool unlike urban areas, and rural hospitals typically pay less, said attorney Lee Kim, senior principal of cybersecurity and privacy of the Healthcare Information and Management Systems Society. "The intentions are good, but the question is whether there is the political will to get this through both chambers," she said. "There is a moderate chance that this bill could gain momentum. The real question is whether this bill will solve the problem of cybersecurity workforce shortage in rural hospitals."