Cyberattack disrupts hospital computer systems across US, hindering services

theguardian.com

20 points·m_kos··8 comments

Very few details. Nothing about it posted at https://www.pmh.com/news/ or https://www.crozerhealth.org/news/ or on their home pages either.

I'm fully expecting to hear that a lot of people's very sensitive data has been leaked and that there will be no meaningful consequences for any of the companies who failed in their responsibly to secure that information.

Probably this zero day:

https://www.tenable.com/blog/cve-2023-34362-moveit-transfer-...

Consequences should go to the attackers.

Not possible due to geopolitics, and going after the attackers wouldn't absolve the software companies either way. Cyberattacks are not done using missiles, they are done using lockpicking kits. Just like sensitive documents storage companies and banks have a responsibility to build stronger vaults, enterprise software has a responsibility to close security holes.

Bringing down a hospital is equivalent to bombing it. Send in a specops team and assassinate the attackers.

Do you actually believe this or are you trying to provoke a reaction? Start a guaranteed nuclear war over an opportunistic ransomware attack?

Consequences should also go to the attackers.

The attackers are to blame for their actions, just like the corporations who insist on collecting and storing our data, but refuse to take steps to adequately protect it are also to blame for their negligence and/or incompetence.

We need to uncouple hospitals and critical infrastructure until this whole AI thing shakes out. It’s unacceptable risk to put our entire medical system at risk just for EMR.

Mark my words.

Reply on news.ycombinator.com