- Determine which systems have been affected and isolate them immediately.
- If unable to disconnect devices from the network, turn them off to avoid further spread.
- Triage affected devices for restoration.
- Document what has occurred, based on initial analysis.
- Get help from a third-party incident response provider.
- If mitigation prospects look slim, take a system image and memory capture of a sample of affected devices. Be mindful of preserving evidence. Collect relevant logs and samples of malware binaries.
- Consult federal law enforcement regarding decryptors available as researchers have broken encryption algorithms for some ransomware variants.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.