So the UT medical system computers were hacked a couple of days ago , $20 million asking price to restore ,

Why can't these big systems just be wiped and restored from back-ups? Are the back-ups infected also ?


Also Why can they not catch these guys ? Follow the money to the source and take them out ?

MO

They can’t recover the lost data if they wipe it.

My son does this very thing for SpaceX. He monitors all their computer systems and prevents this sort of thing.

He has a degree in computer forensics. A few pages further in the books than a simple programmer.

Reason #590 as to why EMR sucks; I can't imagine how many DOBs, addresses, and SSNs of employees and patients have been compromised.
The backups probably are insufficient and outdated.
Pretty easy to hide your location on the internet.

There is a good chance the malware was in the system dormant for a while meaning the the back ups are probably compromised. Most of the bad actors are foreign making it difficult to physically apprehend them. They are probably requiring payment via cryptocurrency making it very difficult to follow.

Bottom-line is these guys are pretty darn good at this "business model".

Depends on how their file shares were setup, replicated, etc.

In most cases, Ransomware goes after files shares that contain personal, work, etc. data so you cannot conduct your business without paying. If the company had replicated their data to an offsite location that is not "breached" they can restore without paying.

Watch the hacker dude on the shawn ryan podcast, its crazy what those guys can do.

it happened to the co I worked for 3 years ago. They shut us down. Cost the owner 3 million to get back going. At the same time it happened to City of Baltimore. Cost them 19 million. They also hit Fed X and recently City of Dallas. As of yesterday a title co we were closing a deal with. Its a big deal....

This stuff makes me nervous. Nobody is safe from this - nobody.

If you have a small business, pretty much no matter what you do, you can be out-resourced by a hacker. They can beat your best game - at least I am convinced of that. I think for a small business, flying under the radar, so-to-speak, is the biggest blanket of protection we have, which ain't much.

A significant percentage of these cyber attacks originate in Ukraine. Think about that for a minute.

Yep. As I have stated, best “option/plan/prayer,” is that you don’t get their attention. If so, it’s not if, it’s when.

We have only begun to see “technology” used for the destruction of man.

That’s really cool, good for your son

Hmm logged into a UTSW med computer now, no issues here
Guessing UT med is out of Austin?

I do daily work on UTA, UTD, and UTSW systems.
We have connections to UT, but I am gonna stay away from that for the time being....

That's impressive. I made it through four interviews. They said that 5 or 6 were with Elon. Kind of glad I didn't get it. Is your son in McGregor or in S Texas?

It looks like this is UT health east Texas. Which is owned by Ardent out of Nashville... I find that odd...

Either way, it is all of Ardent health which has been compromised including other states.

I was thinking a ransomware attack on a university system that specializes in cybersecurity would be a slap in the face.
This being East Texas makes too much sense...