Careers

Diversity

With 17 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Services

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Molina takes part in arbitration panel at U.S.-Mexico Bar Association conference

Ohio Clock

Hallway with a grandfather clock displayed

The Weekly Hill Update

It’s official: Former IP Partner John Murphy sworn in as district court judge

Serrato, Saraswat speak at IAPP Privacy. Security. Risk. conference

BakerHostetler is closely monitoring a Cybersecurity Advisory issued jointly by several government agencies including the United States Department of Health and Human Services (HHS) and the FBI, on October 28. The <a href="https://us-cert.cisa.gov/ncas/alerts/aa20-302a">Advisory</a> warns of an imminent cybercrime threat to U.S. hospitals and healthcare providers with the purpose of infecting systems with Ryuk ransomware for financial gain. Specifically, the <a href="https://us-cert.cisa.gov/ncas/alerts/aa20-302a">Advisory</a> warns that:  <ul> 	<li>Malicious cyber actors are targeting the Healthcare and Public Health Sectors with Trickbot malware, which often leads to ransomware attacks, data theft, and the disruption of healthcare services.</li> 	<li>These issues are particularly challenging for these organizations now, in the midst of the COVID-19 pandemic; therefore, administrators will need to balance this risk when determining their cybersecurity investments.</li> </ul>  The attacks may use a new Trickbot module and toolset called “Anchor”. As part of Anchor, the attackers use AnchorDNS, a tool for sending and receiving data from victim machines using Domain Name System (DNS) tunneling.  Additional technical details on the specific tactics, techniques and procedures related to this threat, including a link to the Indicators of Compromise (IOCs) are set forth in the Advisory.  The <a href="https://us-cert.cisa.gov/ncas/alerts/aa20-302a">Advisory</a> also sets forth some network and ransomware best practices, including:  <ul> 	<li>Regularly back up data, air gap, and password protect backup copies offline.</li> 	<li>Implement a recovery plan to maintain and retain multiple copies of sensitive or proprietary data and servers in a physically separate, secure location.</li> </ul>  To address this and other threats, healthcare organizations should also review or establish patching plans, security policies, user agreements and business continuity plans to ensure they address these current threats posed by malicious cyber actors.  BakerHostetler is actively monitoring the release of new information about the threat and will provide updates on this developing story as they become available. BakerHostetler has a team of highly experienced incident response attorneys who are ready to help healthcare (and other) clients with responding to ransomware and other cybersecurity incidents.  Authorship Credit: Ted Kobus and Lynn Sessions

core/freeform

New York

Partner

Theodore J. Kobus III

Houston

Lynn Sessions

Enterprise Issues

Intellectual Property

Healthcare Privacy and Compliance

Warning of Cybersecurity Threat to Healthcare Sector – Imminent Threat of Ransomware

Related Services

Featured Insights