On February 21, Change Healthcare suffered a severe cyberattack, which is considered to be the most serious incident of its kind against a US healthcare organization. Since the attack was made public, the American Hospital Association (AHA) has been actively supporting hospitals, health systems, patients, and communities affected by the attack. AHA has developed resources and has provided information to help healthcare organizations safeguard their systems.
- Cybersecurity Advisories – AHA issued a series of Cybersecurity Advisories to provide hospitals with the latest details and guidance about the cyberattack. As the incident has evolved, the Cybersecurity Advisories have included additional information about the indicators of compromise to assist network defenders with conducting a sweep within their environment to determine whether their network has been compromised.
- Calls with Members – On Feb. 23, AHA hosted a call in which nearly 3,000 hospitals leaders heard from leaders at the Department of Health and Human Services, Cybersecurity and Infrastructure Security Agency, and FBI. They also has had several calls with individual hospitals and health systems to hear about how the attacks are affecting their organizations and what assistance they need.
- New Webpage with Latest Resources – The AHA launched a new webpage that provides a convenient central source of updated information related to the cyberattack. It also includes links to all of AHA’s cybersecurity tools and resources led by AHA’s National Advisory for Cybersecurity and Risk John Riggi, who is a highly-decorated 30-year veteran of the FBI.
For more information and resources on cybersecurity, visit the AHA webpage.
