Washington, D.C., November 14, 2024 –GAO exposes critical cybersecurity gaps in HHS, warning of elevated risks to U.S. healthcare amid rising ransomware and IoT threats. Urgent improvements needed.
A recent report by the U.S. Government Accountability Office (GAO) has unveiled substantial cybersecurity deficiencies in the Department of Health and Human Services (HHS), leaving the nation’s healthcare sector vulnerable to escalating cyber threats.
The findings reveal that HHS has yet to meet essential cybersecurity goals, placing patient data at heightened risk amid a surge in ransomware and IoT-targeted attacks.
Without effective oversight and robust security practices, HHS cannot adequately safeguard the sensitive information entrusted to it.
This criticism comes after high-profile incidents, such as the ransomware attack on Change Healthcare, which led to service disruptions and nearly $874 million in damages. The GAO also criticized HHS for not consistently monitoring the adoption of essential ransomware defenses across healthcare entities.
Ransomware is a persistent threat. Yet without tracking implementation of protective measures, HHS remains in the dark about which facilities are most vulnerable.
This lack of surveillance hinders HHS’s ability to provide targeted support to healthcare organizations at risk. The report highlighted further gaps in HHS’s risk assessment practices, particularly for Internet of Things (IoT) and operational technology (OT) devices, which are widely used in healthcare settings.
While HHS has assessed specific IoT devices, a comprehensive evaluation of these technologies remains absent. The GAO recommended an expanded approach to mitigate growing cybersecurity risks across all device types.
As healthcare remains a top target for cybercriminals, the GAO emphasized the urgent need for HHS to collaborate with the Cybersecurity and Infrastructure Security Agency (CISA) and streamline cybersecurity requirements to enhance protections.
Other News At VPNRanks
- Intesa Slammed by Watchdog for Downplaying Data Breach
- Stranger Things Season 5: Epic Final Episode Titles Revealed for 2025 Showdown [/highlighter]
Hey, wait!
Stay informed on the latest privacy updates, cybersecurity insights, and internet freedom news by following VPNRanks news daily! As your primary resource for critical updates in online security, we ensure you’re always in the know. Make VPNRanks your go-to guide for safeguarding your digital life!
