Semperis and Sirius Healthcare Team Up to Launch a Ransomware Task Force for Healthcare Companies

HOBOKEN, N.J.–(BUSINESS WIRE)–Semperis, the pioneer of identity-driven cyber resilience for enterprises, today announced the launch of its ransomware task force for healthcare providers, formed in partnership with Sirius Healthcare, a leading provider of security consulting services for over 450 healthcare clients nationwide. The task force aims to improve the cybersecurity posture and resiliency of hospitals, pharmaceuticals, insurers, and other healthcare companies. The healthcare sector is target-rich for ransomware attacks, which have increased by 400% industry-wide this year, according to Gartner.

“Healthcare companies, big and small, are on the front lines of the global war on ransomware,” said Mickey Bresman, CEO of Semperis. “Think about hospitals that can’t access their systems to save a life or sensitive patient data getting into the wrong hands; the ransomware task force helps organizations take back control. Semperis and Sirius, together, have been called on to help numerous hospitals regain control of their environments—focusing on protecting and recovering their core identity management system, Active Directory—and continuing operations without disrupting patient services. In many cases, the AD was destroyed and required us to hunt down the adversary, close security holes, and eliminate vulnerabilities to trust the environment again following the cyberattack. Today, Semperis is proud to protect five of the largest healthcare organizations in the world.”

A 2021 survey of cybersecurity professionals revealed that organizations in the healthcare sector are among the most targeted by ransomware attackers and the least likely to have developed contingency plans. The exploitation of Active Directory (AD), the identity system used in 90% of organizations worldwide, is a common thread in the surge of ransomware attacks on healthcare companies. Attackers take advantage of weak AD configurations to identify attack paths, access privileged credentials, and deploy ransomware. In partnership with Semperis, Sirius Healthcare offers healthcare organizations the industry’s most comprehensive cybersecurity solutions for AD and Azure AD, supported by a global incident response team.

“The combination of our healthcare specialization and Semperis’ Active Directory security and recovery technical expertise proves to be a game-changer for our healthcare clients facing ransomware attacks,” said Marty Momdjian, Healthcare Solutions Advisor for Sirius, a CDW company. “Together we are able to extend our solution offerings for clients to help protect one of their most critical and persistently targeted attack vectors—directory systems, both on-premises and in the cloud. In a sector where cyberattacks almost always involve AD in some form, this has proved important in providing a strong security stance and minimizing the impact of an attack.”

Semperis and Sirius Healthcare’s ransomware task force is in high demand, having already responded to multiple incidents in the healthcare sector. Recently, a phishing attack compromised the AD of a large orthopedic practice. After a call from the company’s CTO, the task force shut down risky access while a thorough analysis and cleansing of the AD took place. The task force found a domain controller unimpacted by the attack to aid in a swift and secure recovery effort. Fortunately, the company did not suffer any data exfiltration, and business operations had minimal negative consequences. To get more details, the case study is available for download at: https://www.siriuscom.com/case-study/a-swift-response-to-a-healthcare-clients-ransomware-attack/

“Having the Semperis and Sirius teams quickly come to our aid—with no expectation of purchasing their solutions—was one of the few things that allowed us to get a little bit of sleep when we were thrown into the deep end,” said the CTO of the orthopedic practice. “The biggest win wasn’t necessarily of a technical nature, it was that Semperis helped us become acutely aware of the world we were in and the risks we faced. They helped us understand the different phases of the attack and possible future attacks, and helped detect and shut down the hackers once they got in. Semperis knows exactly what to look for and has the tools to do it.”

On Thursday, January 13 at 2 pm EST, Semperis and Sirius Healthcare will host a live webinar, “Stories from the Trenches: How to Protect Active Directory against Ransomware Attacks,” highlighting the real-world experiences of healthcare companies that have engaged the ransomware task force. The webinar will discuss the nature of common AD-based attacks, the vulnerabilities exploited, and the tactics and technologies used to quickly remediate the issues to prevent data theft and avoid disruption of services. To register for the webinar, visit: https://www.thisweekhealth.com/webinar/stories-from-the-trenches-how-to-protect-active-directory-against-ransomware-attacks/

For more information on how Semperis and Sirius Healthcare partner to help healthcare organizations thwart ransomware attacks and strengthen hybrid AD environments, contact: partners@semperis.com

About Semperis

For security teams charged with defending hybrid and multi-cloud environments, Semperis ensures the integrity and availability of critical enterprise directory services at every step in the cyber kill chain and cuts recovery time by 90%. Purpose-built for securing hybrid Active Directory environments, Semperis’ patented technology protects over 50 million identities from cyberattacks, data breaches, and operational errors. The world’s leading organizations trust Semperis to spot directory vulnerabilities, intercept cyberattacks in progress, and quickly recover from ransomware and other data integrity emergencies. Semperis is headquartered in Hoboken, New Jersey, and operates internationally, with its research and development team distributed between San Francisco and Tel Aviv.