The Barts Health NHS Trust is a system of three district general hospitals staffing over 15,000 employees serving 2.5 million patients in east London.
The Health Service Journal reports that the attack affected thousands of files hosted on the hospital group’s Windows XP operating system, and the file sharing system between departments has been turned off, according to the Telegraph.
Last year, ransomware attacks against Northern Lincolnshire and Goole Hospitals forced them to shut down systems and cancel operations for four days.
They were infected with a variant known as Globe2, which commonly infects users via phishing emails containing malicious links, according to ZDNet.
How can you protect your organization against ransomware and other online attacks against patient data?
Update your operating systems. The hospital group was running Windows XP, released in 2001 – over 15 years ago – and it has over 700 reported vulnerabilities logged in the CVE Details database.
Extended support for the OS ended in April 2014, which means it no longer receives security updates. That means it’s an easy target for attackers that exploit known software vulnerabilities in older systems to get access to hospital files.
According to Duo’s 2016 Trusted Access Report, the healthcare industry has twice as many Windows endpoints running XP than Duo’s average customers. And another 78% of the Windows endpoints in healthcare are running on the outdated Windows 7 OS, released in 2009.
Get visibility into your endpoints. Check the security health of every device that logs into your systems to ensure only Trusted Devices can access your applications and patient data.
Create custom device access policies to block risky devices based on what security features they’ve enabled, or what version of software they’re running to reduce the risk of ransomware infection.
Step up your authentication game. Add not only two-factor authentication (also known as multi-factor authentication) to your system logins, but invest in a solution with advanced user access policies to ensure only Trusted Users are granted access.
Run a phishing simulation. Since phishing emails are often the harbinger of ransomware, malware and other credential-stealing attacks, measure your organization’s level of risk and likelihood of getting phished by launching a simulated internal phishing campaign. Then use the data to identify risks and educate your employees. Learn more about Duo Insight, a free phishing simulator tool, and read our guide, The Trouble With Phishing to learn about risks.
"*" indicates required fields
Software Asset Management is a business practice that involves managing and optimising the life cycle of software within an organisation.
Software asset management is relevant to many facets of a business - take a look at some of the roles that it can form part of the focus of.
Software vendors come in all shape and sizes - all with their own set of licensing models and rules. We take a look at just a few of them.
As a constantly evolving subject, SAM is not without its challenges. We take a look at some of the most common ones.
Wondering what an investment in SAM could do for your business? Fill out a few details and find out what return you could get!
Answer a few questions about your SAM infrastructure & experience, and we'll put together a personalised recommendation for the future.
A simple health check of what's being used across your Office 365 estate in this FREE, Microsoft backed and easy to setup review.
Just like you would with your vehicle each year, get an annual check up of your software asset management programme.
Overwhelmed by the task of documenting the steps for a successful SAM programme? Get the experts in to help!
Concerned your SAM tools aren't covering your whole estate? Or on the look out for an entirely new tool? Get us in to assist.
Not content with covering all things SAM related, we've teamed up with Capital to provide a comprehensive hardware asset management review.
A simple, one-time reconciliation of the software you have deployed versus the licence entitlement you own.
A regularly scheduled analysis of your organisation's estate, specifically adapted to your needs and budget.
A full appraisal of your Microsoft 365 setup and how best to optimise it through automated recommendations.
An add-on to our SAMplicity One, MOT and Plus offerings, quickly diagnose your ability to migrate your resources to the cloud.
In collaboration with law firm Addleshaw Goddard, ensure the legality of your SAM programme and get assistance with any contract disputes.
Available as standard with SAMplicity Plus, ensure you're compliant if you're unexpectedly audited by a vendor.
We've teamed up with some of the forefront experts in licensing knowledge so you can teach yourself to be an expert too.
Stumped by the continually evolving complexities of SAM? Join us for one of our comprehensive courses, either in-person or online.
It’s chock full of useful advice, exclusive events and interesting articles. Don’t miss out!