--- title: "Cyberattacks on Hospitals: Top Lessons from Critical Infrastructure Breaches" description: The lessons learned from analyzing breaches in 2020 has underlined the need for healthcare providers to double-down on security. image: https://resources.cerecoreinternational.net/hubfs/Imported_Blog_Media/GettyImages-755651169-1.jpg --- ** - [Careers](https://jobs.crelate.com/portal/cerecore/) - [CereCore US](http://cerecore.net/) - [Events](https://cerecoreinternational.net/events-blog) [![](https://resources.cerecoreinternational.net/hs-fs/hubfs/CereCore_June2021/Images/CereCoreLogo-International.png?width=2120&height=944&name=CereCoreLogo-International.png)](https://cerecoreinternational.net/) # Cyberattacks on Hospitals: Top Lessons from Critical Infrastructure Breaches ![](https://resources.cerecoreinternational.net/hubfs/Imported_Blog_Media/GettyImages-755651169-1.jpg) ![](https://resources.cerecoreinternational.net/hubfs/Web%20Design%20Items/elipse-shape-1.png) #### Stay up to date on our latest blogs and content [Subscribe](https://cerecoreinternational.net/resources-library-subscribe) By [Jeff Bell](https://resources.cerecoreinternational.net/author/jeff-bell) | May 14, 2021 ** 2 minute read ** [Blog](https://resources.cerecoreinternational.net/tag/blog)| [EHR/EPR](https://resources.cerecoreinternational.net/tag/ehr-epr) The lessons learned from analyzing breaches in 2020 has underlined the need for healthcare providers to double-down on security. The recent Colonial Pipeline attack has, once again, demonstrated the vulnerability of US corporations to ransomware attacks and the significant impact to patients, businesses and our communities. In a recent [Briefings from HIPAA article](https://revenuecycleadvisor.com/news-analysis/top-lessons-learned-2020-breach-analysis), I was asked to weigh in on the [2021 Breach Barometer from Protenus](https://email.protenus.com/hubfs/2021%20Breach%20Barometer.pdf). There certainly is progress being made, there are a few key takeaways from this and the latest attack for healthcare IT leaders to be aware of: - Fewer patients were impacted from a higher number of overall breaches according to the Protenus report. This is evidence that progress is being made in cybersecurity programs. - Work from home has opened new security gaps. In the rush to implement and expand capabilities in response to the COVID-19 crisis, shortcuts were possibly taken that violated security best practices. Examples include: - Using older laptops with unsupported operating systems - Permitting use of personal devices to access the corporate network - Loosening security posture requirements for remote connections - Hospitals and healthcare often lack enough qualified security professionals to perform all that is needed for a strong security posture, including patching, periodic and consistent vulnerability and penetration testing, monitoring of networks and systems, investigation of security events, and incident response. (See the [NIST Cybersecurity Framework](https://www.nist.gov/cyberframework/framework) for a more complete list of essential security functions. The recent Colonial Pipeline attack has elevated national impact due to the role of Colonial in the US critical infrastructure. Likewise, the over 400 hospitals and thousands of healthcare sites where CereCore provides IT services are also a component of the US critical infrastructure. **Cybersecurity Guides and Resources: ** In support of our customer’s security efforts and all US health systems, I’ve compiled a list of helpful cybersecurity guides and resources. - Institute for Security and Technology (IST) [Ransomware Task Force Report on Combatting Ransomware](https://securityandtechnology.org/ransomwaretaskforce/report/). This includes key recommendations and a framework for action. For background on the severe impact of ransomware attacks note the following statistics for 2020: ![Infographic 2020](https://resources.cerecoreinternational.net/hs-fs/hubfs/Imported_Blog_Media/Infographic%202020-1.png?width=446&name=Infographic%202020-1.png) - Released this week, the [US Cybersecurity and Infrastructure Security Agency (CISA) along with the FBI updated their guide on ransomware](https://us-cert.cisa.gov/ncas/alerts/aa21-131a), specifically related to the DarkSide attack on Colonial Pipeline. - The updated CISA guide is a supplement to their [previously released ransomware guide](https://www.cisa.gov/publication/ransomware-guide). - Briefings from HIPAA: Top lessons learned from 2020 breach analysis. If you aren’t a subscriber to this newsletter, [download the pdf](https://resources.cerecoreinternational.net/hubfs/CereCore%202021/Revenue%20Cycle%20Advisor_Top%20Lessons%20Learned.pdf). I hope you find these resources helpful to protect your own organization from cybersecurity risk. If we can be of any assistance in helping your health system inventory and analyze your IT infrastructure or [supplement your security efforts](http://cerecore-net.sandbox.hs-sites.com/services/advisory-services), our teams are available for a conversation. ##### About the Author: Jeff Bell Read Bio ** #### Jeff Bell ** ## Related Posts [![Userlane and CereCore International Plan Global Partnership to Drive Faster EHR/EPR Adoption and Maximise Healthcare IT Value](https://resources.cerecoreinternational.net/hubfs/Resource%20Thumbnails/GettyImages-2217159720-1.jpg)](https://resources.cerecoreinternational.net/userlane-and-cerecore-international-plan-global-partnership-to-drive-faster-ehr/epr-adoption-and-maximise-healthcare-it-value) #### [Userlane and CereCore International Plan Global Partnership to Drive Faster EHR/EPR Adoption and Maximise Healthcare IT Value](https://resources.cerecoreinternational.net/userlane-and-cerecore-international-plan-global-partnership-to-drive-faster-ehr/epr-adoption-and-maximise-healthcare-it-value) [CereCore News](https://resources.cerecoreinternational.net/tag/cerecore-news), [Technology](https://resources.cerecoreinternational.net/tag/technology), [EHR/EPR](https://resources.cerecoreinternational.net/tag/ehr-epr) 2 minute read By CereCore on May 8, 2026 **Munich, Germany -- **Userlane announced its intention to establish a strategic partnership with CereCore International, a global healthcare IT services provider, to help healthcare organisations... [Read More **](https://resources.cerecoreinternational.net/userlane-and-cerecore-international-plan-global-partnership-to-drive-faster-ehr/epr-adoption-and-maximise-healthcare-it-value) [![Why Tech Makes Care More Human: Sir David Sloman’s Lessons from the NHS](https://resources.cerecoreinternational.net/hubfs/CC%20Intl%20-%20Website%20Blog%20photo%20965x634px%20(29).png)](https://resources.cerecoreinternational.net/why-tech-makes-care-more-human-sir-david-slomans-lessons-from-the-nhs) #### [Why Tech Makes Care More Human: Sir David Sloman’s Lessons from the NHS](https://resources.cerecoreinternational.net/why-tech-makes-care-more-human-sir-david-slomans-lessons-from-the-nhs) 1 minute read By CereCore Media Coverage on Nov 18, 2025 What happens when bold leadership meets groundbreaking technology? [Read More **](https://resources.cerecoreinternational.net/why-tech-makes-care-more-human-sir-david-slomans-lessons-from-the-nhs) [![Mater Private Network -  Supporting the Implementation of an Electronic Cardiac Rehab Programme](https://resources.cerecoreinternational.net/hubfs/MPN%20Case%20Study.png)](https://resources.cerecoreinternational.net/mater-private-network-supporting-the-implementation-of-an-electronic-cardiac-rehab-programme) #### [Mater Private Network -  Supporting the Implementation of an Electronic Cardiac Rehab Programme](https://resources.cerecoreinternational.net/mater-private-network-supporting-the-implementation-of-an-electronic-cardiac-rehab-programme) [MEDITECH](https://resources.cerecoreinternational.net/tag/meditech), [Case Study](https://resources.cerecoreinternational.net/tag/case-study), [EHR/EPR](https://resources.cerecoreinternational.net/tag/ehr-epr), [Client Perspectives](https://resources.cerecoreinternational.net/tag/client-perspectives) 4 minute read By CereCore on Oct 22, 2025 ###### **The Client ** Mater Private Network is one of Ireland’s leading private healthcare providers, known for delivering world-class services in medical and surgical care. [Read More **](https://resources.cerecoreinternational.net/mater-private-network-supporting-the-implementation-of-an-electronic-cardiac-rehab-programme) ## Put Us to Work Let us know how we can support your initiatives and take some of the heavy lifting from healthcare IT. ![Untitled-4](https://resources.cerecoreinternational.net/hubfs/Web%20Design%20Items/Untitled-4.png) ![](https://resources.cerecoreinternational.net/hubfs/Web%20Design%20Items/accent-shape.png) [![CereCore Logo](https://resources.cerecoreinternational.net/hs-fs/hubfs/CereCore_June2021/Images/CereCoreLogo-International_reverse.png?width=180&height=90&name=CereCoreLogo-International_reverse.png) ](https://cerecoreinternational.net/) [tel:](tel:) 2 Cavendish Square, London, England W1G 0PU Connect With Us: [ Careers ](https://jobs.crelate.com/portal/cerecore/) [** info@cerecoreintl.net](mailto:info@cerecoreintl.net) - - - [ CereCore US ](https://cerecore.net/) © All Rights Reserved CereCore [ Terms of Service ](https://cerecoreinternational.net/terms-of-service) [ Notice at Collection ](https://resources.cerecoreinternational.net/privacy-policy#ccpa) [ Privacy Policy ](https://cerecoreinternational.net/privacy-policy) [ Do Not Sell My Personal Information ](https://resources.cerecoreinternational.net/privacy-policy#how-we-disclose-personal-info) [ Responsible Disclosure ](https://cerecoreinternational.net/responsible-disclosure) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jeff Bell", "url" : "https://resources.cerecoreinternational.net/author/jeff-bell" }, "dateModified" : "2022-11-07T21:22:18.767Z", "datePublished" : "2021-05-14T04:00:00.000Z", "headline" : "Cyberattacks on Hospitals: Top Lessons from Critical Infrastructure Breaches", "image" : [ "https://resources.cerecoreinternational.net/hubfs/Imported_Blog_Media/GettyImages-755651169-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://resources.cerecoreinternational.net/cyberattacks-on-hospitals-top-lessons-from-critical-infrastructure-breaches", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://resources.cerecoreinternational.net/hubfs/CereCore_June2021/Images/CereCoreLogo-International.png" }, "name" : "CereCore International" } } ```