Episode #02: Ransomware Response: Lessons from Recent Healthcare Attacks

In this week's episode, Will walks you through the anatomy of a ransomware strike and shares hands-on response steps every healthcare organization needs.  You'll learn:

• Attack Breakdown: How attackers gain entry via phishing, exposed remote access, or third-party compromise, then move laterally to deploy the ransom payload and steal data.

• Real-World Case Study: A community hospital’s month-long shutdown after the LockBit gang hit Fairfield Memorial Hospital—what went wrong, how they recovered, and the impact on patients and regional EMS.

• Response & Recovery Playbook: Immediate actions to detect, contain, notify, and communicate; best practices for restoring from trusted backups; and long-term hardening measures like network segmentation, MFA, and continuous monitoring.

 

Episode #02 Links to Sources

1. US Healthcare at risk: Strengthening resiliency against ransomware attacks (Microsoft) https://www.microsoft.com/en-us/security/security-insider/emerging-threats/us-healthcare-at-risk-strengthening-resiliency-against-ransomware-attacks

2. The State of Ransomware in Healthcare 2024 (Sophos) https://getmediguard.com/wp-content/uploads/2025/05/sophos-state-of-ransomware-healthcare-2024.pdf

3. Ransomware Attack Associated With Disruptions At Adjacent Emergency Departments in the US (JAMA Network) https://jamanetwork.com/journals/jamanetworkopen/fullarticle/2804585

 

MedTech Minute Stories

1. https://www.healthcareitnews.com/news/griffin-health-ai-helps-point-out-patients-clinicians-should-screen-cancer

2. https://www.reuters.com/business/healthcare-pharmaceuticals/medtronic-separate-diabetes-business-wsj-reports-2025-05-21/

3. https://www.philips.com/a-w/about/news/archive/standard/news/articles/2025/philips-collaborates-with-nvidia-to-improve-patient-care-in-mr-with-latest-ai-advances.htm