Ransomware and phishing attacks are rampant in health care.

Ever get an email from a bank you don’t use saying your account has been compromised?

Ever get a message from a company with whom you do business saying “Click on this link to update your profile”? But you think to yourself, hmmmm, that’s weird, I don’t use that service.

Has a friend sent an email – “hey, watch this video of kittens frolicking in the fields” – and you know that friend hates cats?

Your IT department writes “time to update your password – click here to send your password”.

If when you receive an email message your head tilts “hmmmm – that’s weird” – don’t open that email or click that link or open the attachment!!

One way computers become infected with ransomware is when team members open infected emails or click links in these kinds of phishing emails. The email looks harmless – but it’s not.

According to the Information and Privacy Commissioner of Ontario, “ransomware” is a type of malicious software, or “malware,” that encrypts files on your device or computer and then demands payment in exchange for the key needed to decrypt the files. It essentially locks you out of your data and holds the means of regaining access for ransom.

The IPC issued a guidance document on ransomware in 2016. It’s essential reading for every health privacy officer.  Other great resources come from the Canadian Medical Protective Association and the Health Insurance Reciprocal of Canada.

FREE VIDEO FOR YOUR TEAM

Want an easy way to help your team understand the risks of ransomware and what to do or not do??

There is a great video from The Agenda with Steve Paikin from February 2018 on the topic of  The Dangers of Malicious Emails.  Play the 9 minute video at your next team meeting.

It will explain:

• Ransomware
• Phishing
• Tips on how to identify malicious emails
• Examples of how hackers use brand names to lull you into a false sense of security

Remember to keep track of your team training sessions as part of your privacy compliance efforts.