Tennessee: New state law to protect entities under cyber attack from class action suits amid Ascension Health hack


Another healthcare system is under a cyber attack, and while it’s unclear what, if any information has been accessed, a soon-to-be law will prevent those whose information may have been exposed from filing a class action lawsuit against entities that are hacked as long as the organization wasn’t grossly negligent.

According to a spokesperson for Ascension Health, the organization noticed “unusual activity” May 8, which they determined was due to a ransomware attack. As a result, ambulances are being diverted in some cases, non-emergency procedures, tests, and appointments have been put on pause, and online access to patients’ medical records is blocked.

Read more…
Source: MSN News


Sign up for our Newsletter


Related:

  • US govt pushes spyware to other countries? Senator Wyden would like a word

    May 26, 2023

    The US International Trade Administration (ITA) has admitted it promotes the sale of American-approved commercial spyware to foreign governments, and won’t answer questions about it, according to US Senator Ron Wyden (D-OR). Wyden, in a letter to US Commerce Secretary Gina Raimondo, has demanded answers about the surveillance and policing tech that ITA – a US ...

  • US govt contractor ABB confirms ransomware attack, data theft

    May 26, 2023

    Swiss tech multinational and U.S. government contractor ABB has confirmed that some of its systems were impacted by a ransomware attack, previously described by the company as “an IT security incident.” It also revealed that the attackers had stolen data from compromised devices and that it would notify affected individuals if their information was impacted in ...

  • U.S. DOD Submits Classified Cyber Strategy to Congress

    May 26, 2023

    The Department of Defense announced on Friday that it submitted its classified 2023 cyber strategy to Congress “earlier this week” and plans to release an unclassified summary of its new cybersecurity approach “in the coming months.” “The classified 2023 DOD cyber strategy provides direction to the department to operationalize the concepts and defense objectives for cyberspace ...

  • Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

    May 24, 2023

    Microsoft has uncovered stealthy and targeted malicious activity focused on post-compromise credential access and network system discovery aimed at critical infrastructure organizations in the United States. The attack is carried out by Volt Typhoon, a state-sponsored actor based in China that typically focuses on espionage and information gathering. Microsoft assesses with moderate confidence that this Volt ...

  • CISA and Partners Update the #StopRansomware Guide

    May 23, 2023

    Today, CISA, the Federal Bureau of Investigation (FBI), the National Security Agency (NSA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) published an updated version of the #StopRansomware Guide, as ransomware actors have accelerated their tactics and techniques since its initial release in 2020. The update incorporates lessons learned from the past two years and ...

  • CISA Releases Four Industrial Control Systems Advisories

    May 23, 2023

    CISA released four Industrial Control Systems (ICS) advisories on May 23, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-143-01 Hitachi Energy AFS65x, AFS67x, AFR67x and AFF66x Products ICSA-23-143-02 Hitachi Energy RTU500 Read more… Source: U.S. Cybersecurity and Infrastructure Security Agency Related story: CISA Adds Three Known Exploited Vulnerabilities to Catalog