Healthcare Providers Remain Targets for Ransomware Attacks in the Midst of COVID-19 Pandemic

Although it was widely reported that several ransomware threat actor groups have pledged to not target healthcare providers until the COVID-19 pandemic is over, BakerHostetler’s Digital Assets and Data Management Practice Group and Healthcare Privacy and Compliance team continue to see ransomware attacks launched against healthcare providers. In order to combat the COVID-19 pandemic, healthcare providers have had to radically change their normal business processes, which could make them more vulnerable to ransomware attacks. The response to the COVID-19 pandemic has required healthcare providers to make difficult choices related to workforce staffing. Some healthcare providers have been forced to furlough or lay off nonessential workforce members. Healthcare providers also are permitting some workforce members to work remotely. As previously reported by the Data Privacy Monitor, having a reduced workforce and a remote workforce could put healthcare providers more at risk for cybercrime, including ransomware attacks.