Objective:

To outline the steps taken by Talley Eye Institute after experiencing a ransomware attack and to provide guidance for practices facing similar situations.

Key Findings:

• Ransomware attack involved Gandcrab V5.2 by Russian hackers.
• PHI was not compromised, but an old account was hacked.
• Cybersecurity insurance covered recovery costs without fines from authorities.

Interpretation:

The Talley Eye Institute's experience highlights the importance of having a robust incident response plan, maintaining patient care continuity, and implementing strong cybersecurity measures to prevent future attacks.

Limitations:

• Findings are based on a single case study and may not be generalizable to all practices.
• Details on the effectiveness of new cybersecurity measures post-attack are not provided.

Conclusion:

Practices should prepare for potential cyberattacks by establishing comprehensive cybersecurity protocols and ensuring regular assessments and updates.