How Mega Attacks Are Spotlighting Critical 3rd-Party Risks

Regulatory Attorney Rachel Rose on Top Concerns for Healthcare Security Andrew Koh • September 18, 2024 20 Minutes

Recent mega data breaches involving third-party vendors - such as the Change Healthcare cyberattack - are intensifying the spotlight on critical security risk management and governance issues for business associates and other suppliers, said regulatory attorney Rachel Rose.

When it comes to the impact of cyberattacks on third-party suppliers, "I look at it as a hub and spoke. And the trend that's very apparent to me is that cybercriminals are going for an entity that has a lot of spokes that extend into a variety of different organizations," Rose said.

"So, instead of targeting one hospital, they are going for a Change Healthcare or a SolarWinds that has a lot of healthcare clients, for example, as well as government, financial, defense," she said.

"What this underscores for me from a ...