The FBI recently raided the Florida offices of Pax Technology, a Chinese-owned company that makes point-of-sale payment terminals, because the devices may have been involved in cyberattacks on U.S. and European organizations, according to news reports.
 
鈥淭hese news reports of enforcement activity directed toward Pax are concerning,鈥 said John Riggi, AHA senior advisor for cybersecurity and risk. 鈥淧OS terminals in general have been leveraged in the past as the entry point to compromise networks and sensitive data in health care and other industries. As with any POS terminal, hospitals and health systems are advised to ensure an accurate inventory of the devices, analyze them for any unexplained network traffic, network segment the devices if possible and disconnect any device exhibiting anomalous behavior.鈥

For more information on this or other cyber and risk issues, contact Riggi at jriggi@aha.org
 

Related News Articles

Chairperson's File
Public
Cybersecurity and physical threats are unfortunately significant enterprise risks for health care, regardless of size or location. Every hospital, physician鈥
Headline
The Cybersecurity and Infrastructure Security Agency April 17 released guidance to reduce risks associated with a reported breach of Oracle cloud services.鈥
Headline
The National Counterintelligence and Security Center, the FBI, and the Defense Counterintelligence and Security Center yesterday released guidance on鈥
AHA Cyber Intel
While the rate of cyberattacks on hospitals has risen dramatically, the severity of the impacts has also grown exponentially. Let鈥檚 look at the state of cyber鈥
Headline
The House Energy and Commerce Oversight and Investigations Subcommittee April 1 discussed cybersecurity threats in legacy medical devices during a hearing. The鈥
Headline
The Trump Administration March 28 announced that it renewed for one year the public emergency for ongoing malicious cyber-enabled activities against the U.S.鈥