The agency says threat actors are targeting organizations’ IT help desks with phone calls from a local area code claiming to be revenue cycle or administrator employees. After gaining access, they divert legitimate payments.

Company Makes Progress Restoring IT Services, But Disruption Lingers

The outage shows why health systems need to plan for inevitable cyberattacks, evaluating risks to their operations and financials and putting backups in place, experts say.

Despite the explosion in ransomware hacks like the one against Change Healthcare, regulation is spotty and few new safeguards have been proposed to protect patient data, vulnerable hospitals and medical groups.