HHS settles ransomware investigation into Lehigh Valley Health Network
This brief is machine-written from public headlines and excerpts and has not been reviewed. Check the sources for the full story.
The Office for Civil Rights settled an investigation into Lehigh Valley Health Network following a 2023 ransomware breach by the AlphV group, also known as BlackCat. The threat actors drew widespread attention by leaking stolen patient photos on their extortion site.
Why it matters
Extortion tactics involving sensitive medical data create severe regulatory and reputational risks. Security programs must prioritize resilience against double-extortion tactics.
What to do
- Maintain offline and regularly tested backups.
- Update incident response plans for data extortion scenarios.
- Regularly audit healthcare data security controls.