Health Information Sharing and Analysis Center Issues Alert on Black Basta Ransomware Threat in Healthcare Sector

The healthcare sector is on high alert as the Russia-backed ransomware group Black Basta has been targeting organizations with accelerated attacks. The Health Information Sharing and Analysis Center issued a threat alert, prompting the American Hospital Association to send out cybersecurity advisories to its members.

One of the major healthcare systems impacted by this cyberattack is the St. Louis-based Ascension health system. The attack has caused widespread disruption, with clinical operations being severely hampered. Staff at Ascension’s hospitals are struggling to maintain services, including imaging, as they work to recover their systems.

The urgency of the situation is emphasized by the fact that at least two healthcare organizations in Europe and the United States have already experienced serious disruptions due to Black Basta ransomware. The AHA is urging its member hospitals to take immediate action to defend against this emerging threat.

John Riggi, AHA’s national advisor for cybersecurity and risk, highlighted the active targeting of the healthcare sector by Black Basta cyber actors. The group has been using advanced techniques to evade detection and execute attacks with legitimate system tools.

The cyberattack on Ascension has led to patients being turned away or rescheduled, with hospital staff struggling to access electronic health records and essential systems. The incident underscores the importance of information sharing within the healthcare sector and with government agencies to improve defense mechanisms.

Experts warn that Black Basta has extorted over $100 million since its emergence, making it a major threat to the healthcare industry. The recent attack on Ascension, along with other incidents involving healthcare organizations like Kaiser Permanente and Change Healthcare, highlights the need for increased cybersecurity measures in the healthcare sector.

As the healthcare industry faces growing cybersecurity threats, experts recommend adopting AI-powered security tools to detect anomalous behavior and enhance resilience against coordinated attacks. With the increasing sophistication of cybercriminal tactics, it is crucial for healthcare organizations to prioritize cybersecurity measures to protect patient data and critical systems.