--- title: Responding to the WannaCry Cyber Attack description: We can be certain this is not the last attack we will see, ransomware or otherwise; however, by looking at WannaCry as an opportunity to critically evaluate and increase the security of the care environment, image: https://blog.thehcigroup.com/hubfs/cyberwc.png --- ![Photo of Brian Halligan](https://blog.thehcigroup.com/hs-fs/hubfs/Hcigroup%20-%20Theme%20-%202022/images/hcigroupnew232-1.png?width=253&name=hcigroupnew232-1.png "Photo of Brian Halligan") - [What we do](http://www.thehcigroup.com/uk/what-we-do) - [EPR Solutions](http://www.thehcigroup.com/uk/epr-solutions) - [Cerner Consulting UK](http://www.thehcigroup.com/uk/cerner-epr-consulting) - [Epic Consulting](http://www.thehcigroup.com/uk/epic-epr-consulting) - [Meditech Consulting UK](http://www.thehcigroup.com/uk/meditech-epr-consulting) - [Digital Strategy and Advisory Services](http://www.thehcigroup.com/uk/digital-strategy-and-advisory) - [Electronic Patient Records (EPR) Implementation](http://www.thehcigroup.com/uk/epr-implementation-and-advisory) - [Augmentation and Optimisation](http://www.thehcigroup.com/uk/augmentation) - [Business Intelligence, Analytics and Automation](http://www.thehcigroup.com/uk/business-intelligence) - [Cloud Services](http://www.thehcigroup.com/uk/cloud-services) - Our Views - [Blog](https://blog.thehcigroup.com/the-hci-group-uk) - [Webinar Hub UK](http://www.thehcigroup.com/uk/webinar-hub) - About us - [Who we are](http://www.thehcigroup.com/uk/who-we-are) - [Sustainability](http://www.thehcigroup.com/uk/sustainability) - [Frameworks](http://www.thehcigroup.com/uk/frameworks) [Contact Us](https://www.thehcigroup.com/uk/contact) - - # Responding to the WannaCry Cyber Attack ![Responding to the WannaCry Cyber Attack](https://blog.thehcigroup.com/hubfs/cyberwc.png) Posted by [The HCI Group](https://blog.thehcigroup.com/author/the-hci-group) on May 18, 2017 at 8:54 AM Share - - - - - ![cyberwc.png](https://blog.thehcigroup.com/hs-fs/hubfs/cyberwc.png?width=617&height=298&name=cyberwc.png) As many customers, friends, and colleagues in over 150 countries experienced last Friday, the threat of [ransomware](https://blog.thehcigroup.com/cyber-security-series-ransomware-and-unpatched/unmanaged-equipment) is real. Aside from the progressively growing ransom costs and associated operating losses, the WannaCry ransomware demonstrated both how critical and vulnerable our data is. Nowhere is this more important than in the clinical care environment. For those of you who are working to contain a breach or concerned about WannaCry, we encourage you to take the following steps: - Immediately block any inbound traffic where SMB is publicly accessible via the internet (ports 139, 445) - Patch all Windows systems with the patch update Patch Details- MS17-010. - Disable SMBv1 in Windows Systems Though the threat of the WannaCry ransomware has been reduced and its progression slowed, the risk of similar attacks now looms large. We currently aware of more than 225 types of ransomware attacks; however, exploits, like EternalBlue, are sufficiently common to guarantee this will not be the last such attack. With clinician capability and patient lives on the line it’s critical, now more than ever, that we take a proactive approach to reducing future risk. [![Cyber Security Ransomware](https://no-cache.hubspot.com/cta/default/280490/dfc90a1f-07d9-46fe-b5c2-993a5bc65b86.png)](https://cta-redirect.hubspot.com/cta/redirect/280490/dfc90a1f-07d9-46fe-b5c2-993a5bc65b86) If you have not already, we strongly encourage you to undertake the following: - Ensure a multi-location, hybrid media data backup program in place and active - Ensure downtime policies are established, updated, tested, and distributed throughout your organization - Perform Security Assessments & Audits to identify Information security posture & associated risks - Review the current operating environment (hardware and software) to ensure it is patched and updated - Develop a consistent approach or deploy a patch management solution to maintain and update your operating environment - Evaluate current threat monitoring capability to ensure both novel and established threats can be quickly and decisively identified - Evaluate incident response policies, procedures, and capabilities to reduce the latency between identification of threat and response - Evaluate automated, real-time dynamic threat response capabilities to reduce the risk from zero-day attacks, trojans, rootkits, and phishing - Ensure communication between critical assets is secured to protect against Man-In-The-Middle (MITM) & DDoS attack We can be certain this is not the last attack we will see, ransomware or otherwise; however, by looking at WannaCry as an opportunity to critically evaluate and increase the security of the care environment, we can significantly reduce the risk and impact of subsequent attacks. In so doing, we can reduce the risk to ourselves, our clinicians, and, most critically, our patients. If you’d like to discuss your security concerns, security strategy, or learn more about reducing risk in your environment, [please contact HCI here.](https://www.thehcigroup.com/solutions/healthcare-it-advisory-services/security-services) [![Download the Cyber Security Webinar](https://no-cache.hubspot.com/cta/default/280490/62f3c4fe-efb6-4d17-b69f-4f21140096fa.png)](https://cta-redirect.hubspot.com/cta/redirect/280490/62f3c4fe-efb6-4d17-b69f-4f21140096fa) ### POSTS BY TOPIC - - ## Join our newsletter and stay up to date with the HCI Group [![HCigroup-Logo](https://blog.thehcigroup.com/hubfs/Imported%20images/HCigroup-Logo-blue-1.png%3Fwidth=337%26name=HCigroup-Logo-blue-1.png)](http://www.thehcigroup.com/uk/home) - - UK Important Links - [Privacy Policy](http://www.thehcigroup.com/uk/privacy-policy) - [Services](http://www.thehcigroup.com/uk/what-we-do) - [Blog](https://blog.thehcigroup.com/the-hci-group-uk) - [About](http://www.thehcigroup.com/about-the-hci-group) UK Information Links - Terms of Service - [About Us](http://www.thehcigroup.com/about-the-hci-group) - [Contact Us](http://www.thehcigroup.com/uk/contact) - Our Location - [Our Story](http://www.thehcigroup.com/about/history) Contact HCI Group [+44-1792-717490](tel:+44-1792-717490) [info@thehcigroup.com](mailto:info@thehcigroup.com) Copyright, The HCI Group INC, 2009-2026 - Terms and Conditions - [Privacy Policy](http://www.thehcigroup.com/uk/privacy-policy) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "The HCI Group", "url" : "https://blog.thehcigroup.com/author/the-hci-group" }, "datePublished" : "2017-05-18T12:54:49.000Z", "headline" : "Responding to the WannaCry Cyber Attack", "image" : [ "https://blog.thehcigroup.com/hubfs/cyberwc.png" ], "mainEntityOfPage" : { "@id" : "https://blog.thehcigroup.com/responding-to-the-wannacry-cyber-attack", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.thehcigroup.com/hubfs/HCigroup%20Logo-01-3.png" }, "name" : "The HCI Group" } } ```