Caroline Eisenmann

La seguridad de nuestra red es mala, decía el mensaje. Pero podemos ayudarlo con 100 000 en efectivo y aseguraremos que su pequeño hospital no sufra ningún desastre.

HhwUjgtaRO0xbnRVXnaBdyCWsQsNcLrV46LN5dxc/ec214Zs59Ts6ILTA4iOi0AZjj7ss97k+GbdTq17tPNTSkNQFY8nlmFZld5wBL/DND4Zd8UbJ51UE9QqlLDNQ5ud

Reprint: R0910B
Sunnylake Hospital is being held up by online extortionists who have blocked access to its electronic medical records and are demanding $100,000 to restore it. Paul Layman, Sunnylake&#8217;s CEO, didn&#8217;t take their first e-mail seriously, and now the hospital has ground to a halt. Paul&#8217;s golden-boy IT director can&#8217;t seem to outwit the hackers. Sunnylake&#8217;s legal counsel tells Paul, &#8220;Literally every second is a liability.&#8221; The chief of staff is in a mutinous fury. What should Paul do?
He should pay the extortionists, advises Per Gullestrup, the CEO of Clipper Projects, who in late 2008 was closely involved in negotiations with Somali pirates who had seized a Clipper Group ship. But first Paul should hire a negotiator to prevent the extortionists from doing further mischief.
He should absolutely not acquiesce, says Richard L. Nolan, a professor at the University of Washington&#8217;s Michael&#160;G. Foster School of Business, because the hackers may have embedded further corruption in the system. And Paul must communicate fully with the staff, his board, patients, and the public.
Peter R. Stephenson, chairman of the department of computing at Norwich University, recommends shutting down the servers, running a malware scan on every workstation in the hospital, and watching what happens for 24 hours, in case the extortionists are insiders.

When Hackers Turn to Blackmail

Reimpresión: R0910B El hospital de Sunnylake está siendo asaltado por extorsionadores en Internet que han bloqueado el acceso a su historial médico electrónico y exigen 100 000 dólares para restaurarlo. Paul Layman, el CEO de Sunnylake, no se tomó en serio su primer correo electrónico y ahora el hospital está paralizado. El director de TI de Paul no puede burlar a los hackers. El asesor legal de Sunnylake le dice a Paul: «Literalmente, cada segundo es una responsabilidad». El jefe de gabinete está en una furia desenfrenada. ¿Qué debe hacer Paul? Debería pagar a los extorsionadores, aconseja Per Gullestrup, CEO de Clipper Projects, quien a finales de 2008 participó de cerca en las negociaciones con piratas somalíes que se habían apoderado de un barco del Grupo Clipper. Pero primero Paul debería contratar a un negociador para evitar que los extorsionadores hagan más travesuras. No debería consentir en absoluto, afirma Richard L. Nolan, profesor de la Escuela de Negocios Michael G. Foster de la Universidad de Washington, porque es posible que los piratas informáticos hayan incrustado aún más corrupción en el sistema. Y Paul debe comunicarse plenamente con el personal, su junta, los pacientes y el público. Peter R. Stephenson, director del departamento de informática de la Universidad de Norwich, recomienda cerrar los servidores, realizar un análisis de malware en todas las estaciones de trabajo del hospital y observar lo que ocurre durante 24 horas, por si los extorsionadores están dentro.

Cuando los hackers recurren al chantaje

Reprint: R0910B Sunnylake Hospital is being held up by online extortionists who have blocked access to its electronic medical records and are demanding $100,000 to restore it. Paul Layman, Sunnylake’s CEO, didn’t take their first e-mail seriously, and now the hospital has ground to a halt. Paul’s golden-boy IT director can’t seem to outwit the hackers. Sunnylake’s legal counsel tells Paul, “Literally every second is a liability.” The chief of staff is in a mutinous fury. What should Paul do? He should pay the extortionists, advises Per Gullestrup, the CEO of Clipper Projects, who in late 2008 was closely involved in negotiations with Somali pirates who had seized a Clipper Group ship. But first Paul should hire a negotiator to prevent the extortionists from doing further mischief. He should absolutely not acquiesce, says Richard L. Nolan, a professor at the University of Washington’s Michael G. Foster School of Business, because the hackers may have embedded further corruption in the system. And Paul must communicate fully with the staff, his board, patients, and the public. Peter R. Stephenson, chairman of the department of computing at Norwich University, recommends shutting down the servers, running a malware scan on every workstation in the hospital, and watching what happens for 24 hours, in case the extortionists are insiders.

Cuando los hackers recurren al chantaje

Resumen.

Partner Center