Decoder with Nilay Patel artwork

Never pay the ransom — a cybersecurity CEO explains why

Decoder with Nilay Patel · with Steve Cagle · October 27, 2022 · 66 min

Summary

Ransomware attacks are crippling healthcare organizations, leveraging the high value of patient data and the critical need for system uptime. This episode unpacks why hospitals are prime targets, the role of cryptocurrency in facilitating attacks, and the complex decision-making around paying ransoms. Learn actionable strategies to protect sensitive data and ensure business continuity in the face of evolving cyber threats.

Key takeaways

Topics covered

ransomware attackshealthcare cybersecuritydata exfiltrationcyber insurance requirementsincident response planningdata valuation on black market

Episode description

Steve Cagle is the CEO of Clearwater Compliance, which is a cybersecurity firm focused on the healthcare industry. Basically, they lock down hospital computer systems, which contain a huge amount of personal data, and are so mission critical that ransomware attackers know that hospitals are more likely to just pay up. If the cryptocurrency explosion has accomplished anything, it’s making ransomware attacks easier and more lucrative for bad guys. Steve told me there’s so much personal information in a hospital system that a single patient’s record can sell for a huge premium over somthing like a credit card number. And we talked about amount of regulation needed to secure that data and that some insurance providers require hospitals to have a minimum level of security, or they won't be covered. It's a fascinating one. Links: Cyber Security Week 2022 Penetration test Cyberattack delays patient care at major US hospital chain Average Healthcare Data Breach Costs Surpass $10M, IBM Finds Transcript: https://www.theverge.com/e/23175031 Credits: Decoder is a production of The Verge, and part of the Vox Media Podcast Network. It was produced by Creighton DeSimone and Jackie McDermott. Research by Liz Lian and it was edited by Jackson Bierfeldt. The Decoder music is by Breakmaster Cylinder. Our Sr Audio Director is Andrew Marino and our Executive Producer is Eleanor Donovan. Learn more about your ad choices. Visit podcastchoices.com/adchoices

Related episodes

Frequently asked about this episode

What's takeaway #1 from this episode?
Hospital patient records are significantly more valuable on the black market than credit card numbers, making healthcare a prime target for ransomware.
What's takeaway #2 from this episode?
Cyber insurance providers are increasingly mandating minimum security standards for hospitals, creating an external driver for improved cybersecurity posture.
What's takeaway #3 from this episode?
Paying a ransom does not guarantee data recovery and can incentivize future attacks, with critical data often already exfiltrated regardless of payment.
What's takeaway #4 from this episode?
Proactive measures like penetration testing and robust incident response plans are crucial for mitigating ransomware risks and minimizing operational disruption.

Listen