Ransomware 101
This type of cyberattack locks files and demands money to restore access.
What is ransomware?
This healthcare system experienced a breach in March 2025 affecting 5.6 million people.
What is Yale New Haven Health?
Fake emails pretending to be from trusted sources are known as this.
What is phishing?
This security model continuously verifies every user and device.
What is Zero Trust?
This type of information includes Social Security numbers and medical records.
What is Protected Health Information (PHI)?
Healthcare organizations collect this type of information to care for patients.
What is personal/patient information (PHI)?
This healthcare technology company discovered unauthorized access in March 2026.
What is CareCloud?
Hospitals can be compromised when attackers target these connected companies instead of the hospital directly.
What are third-party vendors?
AES-256 and RSA-2048 are examples of this security technique.
What is encryption?
Hospitals must notify this federal department within 60 days of discovering certain breaches.
What is the Department of Health and Human Services (HHS)?
Criminals often use stolen patient information to commit this crime involving someone's identity.
What is identity theft?
This information was NOT stolen during the Yale New Haven Health breach.
What are electronic medical records or credit card numbers?
These hospital devices often lack strong built-in security, making them attractive targets.
What are medical devices (X-rays, heart monitors, etc.)?
IDS/IPS and EDR are used for this cybersecurity purpose.
What is real-time threat detection?
Hospitals often switch to these instead of electronic records during ransomware incidents.
What are paper charts/manual records?
Without this, encrypted files often cannot be recovered after a ransomware attack.
What is the decryption key?
Approximately this many people were affected by the Yale New Haven Health attack.
What is 5.6 million?
This type of malicious software locks files and demands payment.
What is malware/ransomware?
Dividing a hospital network into isolated zones is called this.
What is network segmentation?
One emotional effect patients may experience after a data breach.
What is emotional stress?
Name two dangers of ransomware besides locking files.
What are identity theft, phishing scams, fraud, medical identity theft, or selling personal information?
CareCloud detected hackers after approximately this many hours.
What is 8 hours?
During phishing attacks, hackers often steal these to gain access.
What are login credentials?
Regularly updating systems to remove weaknesses is known as this.
What is vulnerability and patch management?
Name three types of information commonly targeted by cybercriminals.
What are PHI, PII, Social Security numbers, bank numbers, credit card information, or biometric data?