In this week's episode, Will walks you through the anatomy of a ransomware strike and shares hands-on response steps every healthcare organization needs. You'll learn:
Attack Breakdown: How attackers gain entry via phishing, exposed remote access, or third-party compromise, then move laterally to deploy the ransom payload and steal data.
Real-World Case Study: A community hospital’s month-long shutdown after the LockBit gang hit Fairfield Memorial Hospital—what went wrong, how they recovered, and the impact on patients and regional EMS.
Response & Recovery Playbook: Immediate actions to detect, contain, notify, and communicate; best practices for restoring from trusted backups; and long-term hardening measures like network segmentation, MFA, and continuous monitoring.
Episode #02 Links to Sources
1. US Healthcare at risk: Strengthening resiliency against ransomware attacks (Microsoft)
https://www.microsoft.com/en-us/security/security-insider/emerging-threats/us-healthcare-at-risk-strengthening-resiliency-against-ransomware-attacks
2. The State of Ransomware in Healthcare 2024 (Sophos)
https://getmediguard.com/wp-content/uploads/2025/05/sophos-state-of-ransomware-healthcare-2024.pdf
3. Ransomware Attack Associated With Disruptions At Adjacent Emergency Departments in the US (JAMA Network)
https://jamanetwork.com/journals/jamanetworkopen/fullarticle/2804585
MedTech Minute Stories
