Brooklyn Hospital System Serving Poor People Hit by Cyber Attack

[plat]

Content source

https://www.nytimes.com/2022/12/12/nyregion/brooklyn-hospital-cyberattack.html

These hospitals are all in my immediate area, which is a poor and working-class section of New York City. The Administrators ought to be severely ashamed of themselves for not heeding the warnings and securing their systems. Other facilities that serve the poor have not been so affected, not yet anyway.

A Brooklyn hospital group that serves patients in some of New York’s poorest neighborhoods has been battling the consequences of a cyberattack that forced some critical services offline.

The group, One Brooklyn Health, was hit by the attack in late November, officials confirmed. Now, even as cybersecurity experts work to get its three hospitals fully back online, doctors and nurses are forced to rely on methods most hospitals left behind in the 1990s: pen-and-paper patient care.

 

[Andrezj]

The Administrators ought to be severely ashamed of themselves for not heeding the warnings and securing their systems.

the administrator (both management and information tech staff) role in this is only a small piece of the puzzle:

how do you know that an employee did not cause this ransomware attack by selecting a link in an email, downloading a file, and then launching it?
how do you know that the health group does not subcontract out its information technology operations?
how do you know if there is sufficient budget for proper cybersecurity? (hospitals that serve the poor are notorious for budgets that run in a deficit, with a continuous struggle to protect networks, security is not the priority when there is not enough money in a health care setting).
how do you know if the health group is able to hire sufficient qualified information technology staff?
how do you know that they are not running unpatched server 2008, xp, windows 7 - in some scenarios they cannot be patched.
you do realize that much internet\lan connected health care software is, by design, cannot and never will be updated - not even security patches - ever - such as mri and pharmacy dispensing software?

Other facilities that serve the poor have not been so affected, not yet anyway.

the uk national health service was hit nation wide by a ransomware attack
a local hosptial was hit by a ransomware attack
there are literally thousands of health care facilities that serve the poor that have been hit by cyber attacks

 

[silversurfer]

the administrator (both management and information tech staff) role in this is only a small piece of the puzzle:

how do you know that an employee did not cause this ransomware attack by selecting a link in an email, downloading a file, and then launching it?
how do you know that the health group does not subcontract out its information technology operations?
how do you know if there is sufficient budget for proper cybersecurity? (hospitals that serve the poor are notorious for budgets that run in a deficit, with a continuous struggle to protect networks, security is not the priority when there is not enough money in a health care setting).
how do you know if the health group is able to hire sufficient qualified information technology staff?
how do you know that they are not running unpatched server 2008, xp, windows 7 - in some scenarios they cannot be patched.
you do realize that much internet\lan connected health care software is, by design, cannot and never will be updated - not even security patches - ever - such as mri and pharmacy dispensing software?


the uk national health service was hit nation wide by a ransomware attack
a local hosptial was hit by a ransomware attack
there are literally thousands of health care facilities that serve the poor that have been hit by cyber attacks

What the hell is your intention with such a bunch of questions including the answer from yourself
You shouldn't trying to teach our forum people how the world does work, no need as we are all adults

 

[Andrezj]

What the hell is your intention with such a bunch of questions including the answer from yourself
You shouldn't trying to teach our forum people how the world does work, no need as we are all adults

you ok?

 

[silversurfer]

you ok?

Yes, I am doing fine. Guess the opposite about you

 

[Andrezj]

Yes, I am doing fine. Guess the opposite about you

very obviously you are not ok, your response to my post is completely inappropriate, disrespectful and disturbed
you should go outside and touch some grass to calm down
the op went straight to blaming the administrators and falsely claimed that no other health systems that serve the poor have been compromised
the questions i ask are basic ones that the op should have thought about before immediately blaming the administrators for the entire situation

 

[plat]

how do you know that an employee did not cause this ransomware attack by selecting a link in an email, downloading a file, and then launching it?
how do you know that the health group does not subcontract out its information technology operations?
how do you know if there is sufficient budget for proper cybersecurity? (hospitals that serve the poor are notorious for budgets that run in a deficit, with a continuous struggle to protect networks, security is not the priority when there is not enough money in a health care setting).
how do you know if the health group is able to hire sufficient qualified information technology staff?
how do you know that they are not running unpatched server 2008, xp, windows 7 - in some scenarios they cannot be patched.
you do realize that much internet\lan connected health care software is, by design, cannot and never will be updated - not even security patches - ever - such as mri and pharmacy dispensing software?

What is your problem, friend? Should I have checked with you first before posting?

There are many posts about various facilities struck by cyber crooks on this forum. This one hit close to home, literally. Try to have a nice day, OK? Take care.

@moderators--pls lock this thread.

 

[silversurfer]

very obviously you are not ok, your response to my post is completely inappropriate, disrespectful and disturbed
you should go outside and touch some grass to calm down

What really? I tried to be polite, usually my tone is very rude when people like you trying to be an self-proclaimed expert

Well, it's pretty cold here in Germany today and snowing everywhere, so impossible to find some grass