Treffer: Strategic Guidelines for Responding to a Healthcare Cyber-Attack.
Title:
Strategic Guidelines for Responding to a Healthcare Cyber-Attack.
Authors:
Source:
The Journal of nursing administration [J Nurs Adm] 2026 Jan 01; Vol. 56 (1), pp. 9-13. Date of Electronic Publication: 2025 Dec 19.
Publication Type:
Journal Article
Language:
English
Journal Info:
Publisher: Lippincott Williams & Wilkins Country of Publication: United States NLM ID: 1263116 Publication Model: Print-Electronic Cited Medium: Internet ISSN: 1539-0721 (Electronic) Linking ISSN: 00020443 NLM ISO Abbreviation: J Nurs Adm Subsets: MEDLINE
Imprint Name(s):
Publication: Hagerstown, MD : Lippincott Williams & Wilkins
Original Publication: [Billerica, Mass., Contemporary Publishing Associates]
Original Publication: [Billerica, Mass., Contemporary Publishing Associates]
MeSH Terms:
References:
Sullivan N, Tully J, Dameff C, Opara C, Snead M, Selzer J. A national survey of hospital cyber-attack emergency operation preparedness. Dis Med Pub Health Prep. 2023;17:e363.
Institute of Medicine. Crises Standards of Care: A Systems Framework for Catastrophic Disaster Response. Washington, DC: The National Academies Press; 2012.
Dixit A, Quaglietta J, Nathan K, Dias L, Nguyen D. Cybersecurity: guiding principles and risk management advice for healthcare boards, senior leaders, and risk managers. Healthc Q. 2023;25(4):35–40.
Ghayoomi H, Laskey K, Miller-Hooks E, Hooks C, Tariverdi M. Assessing resilience of hospitals to cyberattack. Digit Health. 2021;7:20552076211059366.
U.S. Department of Health and Human Services. HH’s Office for Civil Rights settles ransomware cyber-attack investigation. October 31, 2023. https://www.hhs.gov/about/news/2023/10/31/hhs-office-civil-rights-settles-ransomware-cyber-attack-investigation.html .
Riggi J. Ransomware attacks on hospitals have changed. AHA Center for Health Innovation. Accessed December 6, 2024. https://www.aha.org/center/cybersecurity-and-risk-advisory-services/ransomware-attacks-hospitals-have-changed.
Joint Commission. Sentinel event alert 67: preserving patient safety after a cyberattack. Jt Comm J Qual Patient Saf. 2023;49(12):724–729.
Moore G, Khurshid Z, McDonnell T, Rogers L, Healy O. A resilient workforce: patient safety and the workforce response to a cyber-attack on the ICT systems of the national health service in Ireland. BMC Health Serv Res. 2023;23(1):1112.
Cisco Press. Responding to real-world cyber threats. Published February 16, 2016; Accessed November 12, 2024 https://www.ciscopress.com/articles/article.asp? P =2481826.
Ricks M. Building capability and community through cyber-incident response exercises. J Bus Contin Emer Plan. 2024;18(1):49–58.
Kamerer JL, McDermott DS. Cyber hygiene concepts for nursing education. Nurse Educ Today. 2023;130:105940.
Turnipseed DL, VandeWaa EA. Crisis leadership during and after the COVID pandemic: Astute nurse leaders make the difference. J Nurs Adm. 2022;52(3):154–159.
American Hospital Association. Navigating a new reality. 2020 https://www.aha.org/aha-center-health-innovation-market-scan/2020-09-22-4-lessons-navigating-new-reality.
Vearrier L, Henderson CM. Utilitarian principlism as a framework for crisis healthcare ethics. HEC Forum. 2021;33(1-2):45–60.
Administration for Strategic Preparedness and Response. U.S. Department of Health and Human Services. Healthcare system cybersecurity: readiness and response considerations. 2022. Accessed October 30, 2024. https://files.asprtracie.hhs.gov/documents/aspr-tracie-healthcare-system-cybersercurity-readiness-response.pdf.
Adams K. Average healthcare data breach cost reaches nearly $11M. MedCity News. July 31, 2023. Accessed October 15, 2024. https://medcitynews.com/2023/07/healthcare-data-breach-cybersecurity-ransomware/#:~:text=The%20average%20cost%20of%20a,average%20cost%20is%20%245.9%20million.
Greenlee M. Cost of data breach 2023: healthcare industry impacts. Security Intelligence. August 16, 2023. Accessed 2024 October 15 https://securityintelligence.com/articles/cost-of-a-data-breach-2023-healthcare-industry-impacts/ .
Diaz N. Healthcare ransomware attacks cost US economy $77B. Becker’s Health IT. October 26, 2023. Accessed 2024 October 15, 2024. https://www.beckershospitalreview.com/cybersecurity/healthcare-ransomware-attacks-cost-us-economy-77b.html#:~:text=Ransomware%20attacks%20on%20healthcare%20have,report%20from%20cybersecurity%20firm%20Comparitech .
Nwosu AU, Goyal SB, Bedi P. Blockchain transforming cyber-attacks: Healthcare industry. In: Abraham A, Sasak H, Rios R, Gandhi N, Singh U, Ma K, ed. Innovations in Bio-Inspired Computing and Applications. New York, NY: Springer; 2021. doi:https://doi.org/10.1007/978-3-030-73603-3_24.
Pelletreau B, Riggi J, Gale BM, Mossburg SE. Cybersecurity and how to maintain patient safety. Patient Safety Network: Agency for Healthcare Research and Quality. 2024. Accessed October 10, 2024. https://psnet.ahrq.gov/perspective/cybersecurity-and-how-maintain-patient-safety#:~:text=These%20ransomware%20attacks%20are%20not,technologies%20such%20as%20diagnostic%20technology .
Seh AH, Zarour M, Alenezi M, et al. Healthcare data breaches: Insights and implications. Healthc. 2020;8 (2):133.
Niki O, Saira G, Arvind S, Mike D. Cyber-attacks are a permanent and substantial threat to health systems: education must reflect that. Digit Health. 2022;8:20552076221104665.
Harrison AS, Sullivan P, Kubli A, et al. How to respond to a ransomware attack? One radiation oncology department’s response to a cyber-attack on their record and verify system. Pract Radiat Oncol. 2022;12(2):170–174.
Beaman C, Barkworth A, Akande TD, Hakak S, Khan MK. Ransomware: recent advances, analysis, challenges and future research directions. Comput Secur. 2021;111:102490.
Institute of Medicine. Crises Standards of Care: A Systems Framework for Catastrophic Disaster Response. Washington, DC: The National Academies Press; 2012.
Dixit A, Quaglietta J, Nathan K, Dias L, Nguyen D. Cybersecurity: guiding principles and risk management advice for healthcare boards, senior leaders, and risk managers. Healthc Q. 2023;25(4):35–40.
Ghayoomi H, Laskey K, Miller-Hooks E, Hooks C, Tariverdi M. Assessing resilience of hospitals to cyberattack. Digit Health. 2021;7:20552076211059366.
U.S. Department of Health and Human Services. HH’s Office for Civil Rights settles ransomware cyber-attack investigation. October 31, 2023. https://www.hhs.gov/about/news/2023/10/31/hhs-office-civil-rights-settles-ransomware-cyber-attack-investigation.html .
Riggi J. Ransomware attacks on hospitals have changed. AHA Center for Health Innovation. Accessed December 6, 2024. https://www.aha.org/center/cybersecurity-and-risk-advisory-services/ransomware-attacks-hospitals-have-changed.
Joint Commission. Sentinel event alert 67: preserving patient safety after a cyberattack. Jt Comm J Qual Patient Saf. 2023;49(12):724–729.
Moore G, Khurshid Z, McDonnell T, Rogers L, Healy O. A resilient workforce: patient safety and the workforce response to a cyber-attack on the ICT systems of the national health service in Ireland. BMC Health Serv Res. 2023;23(1):1112.
Cisco Press. Responding to real-world cyber threats. Published February 16, 2016; Accessed November 12, 2024 https://www.ciscopress.com/articles/article.asp? P =2481826.
Ricks M. Building capability and community through cyber-incident response exercises. J Bus Contin Emer Plan. 2024;18(1):49–58.
Kamerer JL, McDermott DS. Cyber hygiene concepts for nursing education. Nurse Educ Today. 2023;130:105940.
Turnipseed DL, VandeWaa EA. Crisis leadership during and after the COVID pandemic: Astute nurse leaders make the difference. J Nurs Adm. 2022;52(3):154–159.
American Hospital Association. Navigating a new reality. 2020 https://www.aha.org/aha-center-health-innovation-market-scan/2020-09-22-4-lessons-navigating-new-reality.
Vearrier L, Henderson CM. Utilitarian principlism as a framework for crisis healthcare ethics. HEC Forum. 2021;33(1-2):45–60.
Administration for Strategic Preparedness and Response. U.S. Department of Health and Human Services. Healthcare system cybersecurity: readiness and response considerations. 2022. Accessed October 30, 2024. https://files.asprtracie.hhs.gov/documents/aspr-tracie-healthcare-system-cybersercurity-readiness-response.pdf.
Adams K. Average healthcare data breach cost reaches nearly $11M. MedCity News. July 31, 2023. Accessed October 15, 2024. https://medcitynews.com/2023/07/healthcare-data-breach-cybersecurity-ransomware/#:~:text=The%20average%20cost%20of%20a,average%20cost%20is%20%245.9%20million.
Greenlee M. Cost of data breach 2023: healthcare industry impacts. Security Intelligence. August 16, 2023. Accessed 2024 October 15 https://securityintelligence.com/articles/cost-of-a-data-breach-2023-healthcare-industry-impacts/ .
Diaz N. Healthcare ransomware attacks cost US economy $77B. Becker’s Health IT. October 26, 2023. Accessed 2024 October 15, 2024. https://www.beckershospitalreview.com/cybersecurity/healthcare-ransomware-attacks-cost-us-economy-77b.html#:~:text=Ransomware%20attacks%20on%20healthcare%20have,report%20from%20cybersecurity%20firm%20Comparitech .
Nwosu AU, Goyal SB, Bedi P. Blockchain transforming cyber-attacks: Healthcare industry. In: Abraham A, Sasak H, Rios R, Gandhi N, Singh U, Ma K, ed. Innovations in Bio-Inspired Computing and Applications. New York, NY: Springer; 2021. doi:https://doi.org/10.1007/978-3-030-73603-3_24.
Pelletreau B, Riggi J, Gale BM, Mossburg SE. Cybersecurity and how to maintain patient safety. Patient Safety Network: Agency for Healthcare Research and Quality. 2024. Accessed October 10, 2024. https://psnet.ahrq.gov/perspective/cybersecurity-and-how-maintain-patient-safety#:~:text=These%20ransomware%20attacks%20are%20not,technologies%20such%20as%20diagnostic%20technology .
Seh AH, Zarour M, Alenezi M, et al. Healthcare data breaches: Insights and implications. Healthc. 2020;8 (2):133.
Niki O, Saira G, Arvind S, Mike D. Cyber-attacks are a permanent and substantial threat to health systems: education must reflect that. Digit Health. 2022;8:20552076221104665.
Harrison AS, Sullivan P, Kubli A, et al. How to respond to a ransomware attack? One radiation oncology department’s response to a cyber-attack on their record and verify system. Pract Radiat Oncol. 2022;12(2):170–174.
Beaman C, Barkworth A, Akande TD, Hakak S, Khan MK. Ransomware: recent advances, analysis, challenges and future research directions. Comput Secur. 2021;111:102490.
Entry Date(s):
Date Created: 20251222 Date Completed: 20251222 Latest Revision: 20260105
Update Code:
20260105
DOI:
10.1097/NNA.0000000000001667
PMID:
41429167
Database:
MEDLINE
Weitere Informationen
This article provides strategic guidance for executive nurses in the event of a cyber-attack. The authors examine the effect of a cyber-attack on a healthcare institution. The types of cyber-security attacks that most commonly affect healthcare organizations are described. The need for proactive, formalized plans for responding to a cyber-attack, a recovery plan for a cyber-security disaster, procedures for system downtime, planned drills, and appropriate cyber-security education for nursing leadership and staff are discussed.
(Copyright © 2025 Wolters Kluwer Health, Inc. All rights reserved.)