Ransomware attacks in healthcare are often caused by inadequate security training. Weak passwords, phishing attacks, and a lack of security patching are the main culprits. Kevin Lancaster, general manager of security solutions at Kaseya, suggests that training videos should be short, engaging, and followed by a quick quiz. Active training methods, such as phishing simulations, should also be employed. Positive reinforcement, such as awards and tying cybersecurity into performance reviews, can foster a culture of security in the organization.
UnitedHealth hid its Change Healthcare data breach notice for months
UnitedHealth’s healthtech company, Change Healthcare, which lost sensitive data of over 100 million people in a 2024 ransomware attack, has finished notifying most of the