The European Commission has released an action plan detailing measures to strengthen cybersecurity across the healthcare sector. The plan includes new cybersecurity requirements for software and hardware products, mandatory reporting on ransom payments, enhanced ICT supply chain management, and the creation of a European Health CISOs Network for skills sharing. The Commission will also initiate a Health Cybersecurity Advisory Board to advise on plan implementation, with no immediate new industry obligations.
Change Healthcare ransomware attack exposes data of 190 million people
The BlackCat ransomware group attacked UnitedHealth subsidiary, Change Healthcare, in February 2024, compromising the data of 190 million individuals. The breach, one of the largest