Key points are not available for this paper at this time.
The healthcare sector in the United States faced an unprecedented cybersecurity threat in October 2020, leading to a cascade of events without established protocols for response. This case study examines the response to the cyberattack in the Boston area (Region 4C), evaluating actions, outcomes, strengths, weaknesses, and strategies for future incidents. Initiated by credible threats reported by federal agencies, the incident escalated rapidly as hospitals encountered suspicious emails and ransomware attacks. Regional emergency management coordination, led by Conference of Boston Teaching Hospitals Emergency Management (COBTH), along with Boston Public Health Commission and Mayor’s Office of Emergency Management, played crucial roles in mitigating the crisis. Challenges such as communication disruptions and lack of cybersecurity personnel lists were swiftly addressed through establishment of redundant communication channels and information security officer lists. Strengths included pre-existing emergency preparedness measures, collaboration between healthcare entities and agencies, and timely information dissemination. Utilization of National Incident Management System (NIMS), Incident Command System (ICS), and Hospital Incident Command System (HICS) facilitated coordinated response. Despite the incident's resolution without patient care impacts, post-incident analysis identified areas for improvement. Recommendations include developing plans for communication downtime, creating cybersecurity officer lists, and enhancing redundant communication methods. Lessons learned emphasize the importance of proactive technology readiness and continual refinement of response protocols for future cyber threats.
Patrick Kiley (Tue,) studied this question.