KAM is providing this information in conjunction with London Amburn as a service to the membership to assist with regulatory changes with regards to the COVID-19 pandemic. Additionally, KAM leadership is working with state and local authorities to address this public health crisis and will keep the membership updated as the situation develops. KAM stands ready to assist in any way possible to keep our community healthy.
HHS Office of Civil Rights Releases COVID-19 Cyber Threat Resources
Recently, HHS Office of Civil Rights (“OCR”) reported that it has seen a sharp increase in cyber-attacks related to the COVID-19 crisis. Whether for financial gain or other motives, hackers have attempted to capitalize upon increased uncertainty and a sudden shift to in-office employees working from home. To reduce risk of a HIPAA breach or violation of state identity theft laws, we recommend providers review and update their HIPAA compliance plans, as needed, to accommodate changes to the working environment; remind employees of their HIPAA security obligations, even while working at home; and keep updated with all current risks and recommended guidelines or mitigation strategies. OCR recently released a list of COVID-19 Cyber Threat Resources which is reproduced below:
· Cyber Attack Quick Response Checklist: Following the WannaCry ransomware attack in 2017, the HHS Office for Civil Rights (OCR) developed a checklist and corresponding Infographic that identifies the steps for a HIPAA covered entity or business associate to take in response to a cyber-related security incident. With the increase in COVID-19 related malicious activity, HIPAA covered entities and business associates are encouraged to review this checklist and infographic for steps to take in the event it encounters a cyber-related security incident.
· COVID-19 Email Phishing Against U.S. Healthcare Providers: The FBI issued a notice regarding email phishing attempts targeting healthcare providers. These phishing attempts leverage COVID-19 related subject lines and content in an attempt to distribute malicious attachments. The notice includes information on how to identify specific phishing attacks and recommends actions to take when such attacks are encountered.
· Online Extortion Scams Increasing During The Covid-19 Crisis: The Internet Crime Complaint Center (IC3) released an advisory regarding an increase in reports of online extortion scams. This advisory includes information on how to recognize online extortion scams and steps to take protect oneself from these scams.
· Selecting and Safely Using Collaboration Services for Telework: Due to the COVID-19 global pandemic, many people are working from home using various video conferencing and online collaboration tools. The National Security Agency (NSA) published a notice that includes criteria to consider when selecting an online collaboration tool as well as information on how to use online collaboration tools securely.
· COVID-19 VTC Exploitation: The increased use of video conferencing and online collaboration tools has led to an increase in malicious activity seeking to exploit the unsecure use of these tools. The HHS Health Sector Cybersecurity Coordination Center (HC3) released a white paper outlining ways these tools could be exploited and recommendations to mitigate these issues.
· COVID-19 Cyber Threats: The HC3 also produced a brief on COVID-19 related cyber threats. This brief includes details on the increase in COVID-19 related malicious activity as well as information on how COVID-19 themed phishing attacks and websites are used as lures to trick users into downloading malicious software or directing users to malicious websites.
· OCR’s Cyber Security Guidance Material may be found here.
The COVID-19 pandemic and response is an evolving situation. All levels of government are engaged in the process of preparing new legislation, regulations and orders both to stem the spread of the virus and to provide relief to employers and employees. We will continue to monitor the situation and provide updates as applicable, especially as such updates affect healthcare providers and their practices.
The KAM has a Covid-19 UPDATES page on our website so that members can view any articles they may have missed. To view all the Covid-19 Updates from the Knoxville Academy of Medicine, visit our website at
