Your business may not be supplying Health Services to the whole of Ireland, and you may not even be in the critical infrastructure business, but don’t think that means ransomware can’t happen to you too. This article shares lessons learned from the headline-grabbing event, and they’re applicable to businesses of all sizes in all industries.
First, what happened?
The May 2021 ransomware attack crippled the Health Service Executive IT systems. The public service provides health services to the whole population of Ireland. The attack, thought to be the largest ever on a public body in Ireland, stole , then encrypted over 700 gigabytes of data. The hacker group took the systems hostage, demanding an undisclosed ransom. The HSE has been offline for days and the disruption will plague the HSE & potentially the population, all of us! for years to come as they threaten to disclose sensitive medical information to the internet.
The lesson learned?
Businesses cannot underestimate the importance of being proactive about preventing cybercriminal attacks. The attack is believed to have originated in Russia and attacked the HSE, but the motive is financial. The majority of cyberattacks come down to money. That means your business could be at risk, too.
Lesson #1: Educate employees
Avoid falling victim to a devastating ransomware attack by educating employees about cybersecurity. Train your employees to recognize phishing emails and other scams, teach them about the importance of strong passwords, help them understand potential dangers of using unsecured wireless networks or unencrypted devices, and prevent their downloading unsanctioned apps onto work computers.
Lesson #2: Use firewalls and email filtering
Configure firewalls to protect your network and block access from malicious IP addresses. Geo-fencing can reduce traffic from foreign actors in known cybercrime hubs.
Additionally, set up advanced spam filters. These help identify and stop phishing emails before they even get to your employees.
Lesson #3: Limit access
You’re thinking you’re doing that already with firewalls and filtering, but this refers to limiting access for the people who work for you. Configure credentials so that employees can access only what’s needed to do their job. Limiting administrative access makes it more difficult for bad actors to do damage.
Also, limit permissions to reduce access. One employee may need to read certain files but have no need to edit them. Configure the file and directory access accordingly.
Lesson #4: Monitor and patch
Even if you’re not online at all hours of the day, you should be monitoring IT 24/7. Set up alerts to identify any suspicious activity. You want to know as soon as possible if there is a vulnerability so your business can limit its exposure.
Also, patch: don’t ignore update notifications from your software providers or operating system manufacturers. Every piece of technology in your office could be an entry point for a bad actor. Cybercriminals are always finding new modes of attack and vulnerabilities. You have to be vigilant and keep your systems updated to cut your risk.
Lesson #5: Have a backup plan
If cybercriminals take your system hostage, you don’t want to have to pay a ransom. It’s costly, and you can’t guarantee you’ll get a functional system back. You will still suffer downtime and damaged reputation from the attack.
Having several system backups, tested regularly for accuracy, helps protect you from catastrophe. We recommend a 3-2-1 approach. That’s three separate copies of the backup on two different storage types, and at least one of them should be off-site.
Customize your backup plan around the specific needs of your business. One company might be fine backing up daily, whereas another may suffer if it loses even a few hours of data.
Cybersecurity doesn’t have to be complicated
Ransomware attacks are expensive and time consuming. Partner with a managed service provider to keep an eye on your systems. Our IT experts can configure protection, track activity, and provide backup solutions. Take preventative action to protect your business against ransomware and other cyberattacks. Work with professionals to install a layered IT security strategy today.
Call us today at 01 255 2470
