Change Healthcare Cyberattack Prompts Cybersecurity Advisory

The party behind this attack has been identified as the ALPHV Blackcat ransomware group.

By Jeff Wardon, Jr., Assistant Editor


Change Healthcare, a provider of revenue and payment cycle management for healthcare, suffered a cyberattack on Feb. 21. The party behind this attack has been identified as the ALPHV Blackcat ransomware group, according to The HIPAA Journal.  

While this attack did not specifically target hospitals and other healthcare facilities, Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the U.S. Department of Health and Human Services (HHS) have sounded the alarm that other healthcare organizations could soon find themselves caught in the crosshairs. 

The organizations released a joint Cybersecurity Advisory (CSA) concerning the APLHV Blackcat ransomware.  

The advisory urges critical infrastructure organizations to implement mitigation measures to reduce the risk of ALPHV Blackcat ransomware incidents. It also mentions a significant update to the ransomware in February 2023, known as the ALPHV Blackcat Ransomware 2.0 Sphynx, that enhances defense evasion capabilities and expands compatibility to encrypt Windows and Linux systems, including VMWare instances. 

CISA recommends taking the following actions to mitigate against ransomware threats:  

  1. Routinely take inventory of assets and data to identify authorized and unauthorized devices and software. 
  2. Prioritize remediation of known exploited vulnerabilities. 
  3. Enable and enforce multifactor authentication with strong passwords. 
  4. Close unused ports and remove applications not deemed necessary for day-to-day operations. 

Jeff Wardon, Jr. Is the assistant editor for the facilities market. 



March 1, 2024


Topic Area: Information Technology , Security


Recent Posts

States Move Forward to Better Protect Senior Citizens

Senior citizens are among the most vulnerable population and require a certain level of care. States are trying to protect them.


Archer and REDA to Transform Newport Beach Building into Outpatient Center

Groundbreaking on the Newport Irvine Medical Center is scheduled for June 2025.


Sunflower Medical Group Facing Lawsuit Following January Data Breach

The lawsuit seeks a jury trial, damages, expanded credit monitoring services and security improvements at Sunflower Medical Group.


Nemours Children's Health Opens New Location in Lake Nona

The nearly 8,000-square-foot facility will increase access to primary and specialty care services.


Enhancing Safety at Hennepin Healthcare with a Screening System

Case study: The system was able to detect 2,500 risk items in less than five months.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.