Clinical Scorecard: What Should You Do If Your Practice Has Fallen Victim to a Cyberattack?

At a Glance

Key Highlights

• Talley Eye Institute experienced a ransomware attack in April 2019.
• The practice contacted the FBI and a health law attorney immediately after the attack.
• Data recovery involved a reputable decryption company rather than paying the hackers.
• No personal health information (PHI) was compromised despite the attack.
• The practice implemented hourly backups and enhanced cybersecurity measures post-attack.

Guideline-Based Recommendations

Diagnosis

• Assess the extent of the cyberattack and identify affected systems.

Management

• Engage law enforcement and legal counsel immediately.
• Utilize professional data recovery services for decryption.

Monitoring & Follow-up

• Conduct regular penetration tests and vulnerability assessments.

Risks

• Potential compromise of PHI and operational disruptions.

Patient & Prescribing Data

Patients of Talley Eye Institute, including new and follow-up patients.

Utilized historical data from previous tests and contacted ASCs for operative reports.

Clinical Best Practices

• Implement hourly data backups and ensure they are tested and encrypted.
• Maintain clear communication with staff and patients regarding data security incidents.
• Document and review cybersecurity policies and incident responses in board meetings.

References

• American Society of Ophthalmic Administrators
• U.S. Department of Health and Human Services