• OCR Issues Guidance On Ransomware
  • August 23, 2016 | Authors: Howard E. Bogard; Richard J. Brockman; Kelli Carpenter Fleming; James A. Hoover; Chester "Chet" J. Hosch
  • Law Firms: Burr & Forman LLP - Birmingham Office ; Burr & Forman LLP - Atlanta Office
  • On July 11, 2016, the Office of Civil Rights of the U.S. Department of Health and Human Services ("OCR") issued new guidance regarding malicious cyber-attacks generally and ransomware specifically (the "Guidance"). According to the Guidance, a U.S. Government interagency report indicates that, on average, there have been 4,000 daily ransomware attacks since early 2016. This represents a 300% increase over the 1,000 daily ransomware attacks reported in 2015. OCR views the exponential growth in ransomware attacks as a significant problem for covered entities and business associates. As a result, OCR issued Guidance for covered entities and business associates to review and follow.