Avoiding Future Ransomware Attacks (Malware) Targeting Healthcare Providers

The “Ransomware” attack (Malware) described below definitely highlights the key value that the Aegify solutions suite offers to any scale of enterprises. The appropriate use of our security scanning and remediation solution would definitely have significantly mitigated the probability of such an attack from occurring as the organization would have stayed on top of any software patches in their web applications. As such, Aegify is a great fit for your organization, since such tasks are burdensome and resource intensive allowing such vulnerabilities to be exploited if not addressed in a timely fashion.

The attack was described as “…used vulnerability in web application that requires patching (updating software versions).”  Which implied that the institution breached was not keeping their computing and web systems patched in a timely manner. Aegify’s regular/continuous scanning process would have uncovered this lapse and allowed the organization an opportunity to correct the vulnerability prior to such an attack. The compliance and risk assessment components of the Aegify solution suite would have worked to further educate the management and staff as to the importance of effective monitoring program and its’ elements.

Aegify allows you to safeguard your systems, network, and computing environments in the most efficient way. In fact this type of an attack highlights one of the key benefits that we bring to enterprises. It enables you to regularly monitor and track the enterprise’s Risk, Security and Compliance elements and factors that are key in any successful security protection program.

Thank you
Aegify Team

Avoiding Future Ransomware (Malware) Attacks Targeting Healthcare Providers The recent malware attack on a healthcare provider in California has significant implications. The delivery approach was not through a phishing email or malware infecting a personal device. Instead, the attackers opportunistically used vulnerability in web applications that requires patching (updating software versions). The attack methodology has impacted companies outside of healthcare and the sophistication of the attack is relatively high.   Information for Your IT Department Aetna Global Security is sharing the attached document from Dell SecureWorks Counter Threat Unit(TM) (CTU) and the National Health Information Sharing & Analysis Center (NH-ISAC). Please forward this document to your IT department and encourage them to review your web applications and upgrade outdated Jboss applications (upgrade to 7.0) to avoid future attacks of ransomware on hospitals.
Aetna is the brand name used for products and services provided by one or more of the Aetna group of subsidiary companies, including Aetna Life Insurance Company and its affiliates (Aetna). Help/Contact us: If you have any questions, please Contact Us. We are located at 151 Farmington Ave, Hartford, Connecticut 06156. ©2016 Aetna Inc. The Aetna name and logo are trademarks of Aetna Inc. Privacy Information | Legal Statement | Program Provisions | Member Disclosure | Aetna Companies: State Directory

Jonathan Houck

Network Manager
houckj@aetna.com

Office:   417-837-0225

Fax:      860-907-2191

Aetna OfficeLink Updates are electronic.  Sign up at:  https://aetna.providerpreference.com

Business Associate Agreements Are Critical to HIPAA Compliance
May 23, 2016

U.S., Canada Issue Ransomware Alert
April 6, 2016

HIPAA Audit: OCR Is On The Move
March 29, 2016

Aegify And Maize Analytics Partner to offer Live Privacy and Security Management
January 29, 2016

$3.5 million fine levied against Triple-S Management Corporation for HIPAA violations
December 4, 2015

Aegify solution selected to protect against cyber threats and HIPAA breaches
October 23, 2015