[{"innerBlocks":[],"name":"core\/freeform","postId":4010,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"Regular cybersecurity training and the placement of a button on email to enable employees to report suspicious messages to the IT department for investigation\u2014rather than clicking on the message\u2014helped mitigate a recent phishing attack on five-hospital Baystate Health in Massachusetts.

Baystate has nearly 13,000 employees, and many received the malicious email\u2014designed to look like an internal Baystate memo to employees\u2014but only five of them clicked on it, a spokesperson says. That still put protected health information at risk for 13,112 patients.

A notice to patients said no evidence was found of patient data being taken or misused. The data at risk included patient names, dates of birth, diagnoses, treatments received, medical record numbers and some health insurance identification numbers.

Also See:<\/b> Why even top executives are hooked by phishing gambits<\/a>

Baystate considered, but is not offering, credit or identity monitoring services because the most sensitive information\u2014Social Security numbers, credit\/debit card numbers and other financial information\u2014were not accessed, according to the spokesperson.

Baystate has conducted regular cybersecurity awareness programs across its hospitals and physician practices, and now will do even more, the spokesperson notes. Before the incident, the IT department was conducting fake phishing attacks and educating those who clicked on the bait; now, these fake attacks also will be increased for educational purposes.
","saveContent":"Regular cybersecurity training and the placement of a button on email to enable employees to report suspicious messages to the IT department for investigation\u2014rather than clicking on the message\u2014helped mitigate a recent phishing attack on five-hospital Baystate Health in Massachusetts.

Baystate has nearly 13,000 employees, and many received the malicious email\u2014designed to look like an internal Baystate memo to employees\u2014but only five of them clicked on it, a spokesperson says. That still put protected health information at risk for 13,112 patients.

A notice to patients said no evidence was found of patient data being taken or misused. The data at risk included patient names, dates of birth, diagnoses, treatments received, medical record numbers and some health insurance identification numbers.

Also See:<\/b> Why even top executives are hooked by phishing gambits<\/a>

Baystate considered, but is not offering, credit or identity monitoring services because the most sensitive information\u2014Social Security numbers, credit\/debit card numbers and other financial information\u2014were not accessed, according to the spokesperson.

Baystate has conducted regular cybersecurity awareness programs across its hospitals and physician practices, and now will do even more, the spokesperson notes. Before the incident, the IT department was conducting fake phishing attacks and educating those who clicked on the bait; now, these fake attacks also will be increased for educational purposes.
","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Despite persistent training, Baystate Health suffers a breach

More for you