Search Articles

My Take: Healthcare ransomware isn't news anymore—what matters here is that UMMC kept their hospital running through downtime procedures while closing clinics, which tells you they'd actually practiced this scenario. That's the difference between an organization that treats incident response as a binder on a shelf versus one that drills their people on paper charts and manual workflows.

My Take: Don't let this feel-good story become your backup strategy. The only reason these 12 companies aren't writing ransom checks is because criminals made a mistake—your security plan can't depend on adversary incompetence.

My Take: Props to Covenant for not paying—refusing to fund criminal operations is the right call even when it hurts. But here's the hard truth: if Qilin got in and exfiltrated 478k records, your HIPAA "compliance" program failed at the only job that actually matters.