News & Insights


Ransomware for Healthcare Providers: What You Need To Know Right Now

As cybercrime increases, generally the proliferation of ransomware attacks is particularly acute. Well over half of businesses will experience one. Nowhere is this more true than in healthcare. When mission-critical patient care functions are interrupted by a ransomware attack, the victim may have few options but never the luxury of time. Healthcare providers must plan thoroughly in advance to best position themselves to weather a ransomware storm. A key part of this will be evaluating whether the incident is a data breach under HIPAA, as well as state laws. The breach analysis presents significant forensic and legal challenges, and it requires consideration of HIPAA-specific ransomware guidance published by the U.S. Department of Health and Human Services Office for Civil Rights (OCR). 

Members of King & Spalding’s Data, Privacy and Security and Healthcare Practice Groups are experienced in preparing healthcare clients for, and guiding them through, ransomware events. Our panel will discuss the ransomware threat landscape and best practices to mitigate risk associated with ransomware attacks. Topics will include the following:

  • Shifting tactics by ransomware attackers

  • Working with law enforcement

  • Engaging with threat actor, including whether to pay ransom

  • Analyzing HIPAA, OCR guidance and state data breach laws

  • Making notifications, including how to evaluate notification deadlines

  • Coordinating with cyber insurance carrier

  • Taking proactive steps to be ready 

If you have questions concerning this roundtable webinar, email Christine Lieber at


King & Spalding is an accredited provider of CLE credit in California, Georgia, Illinois, New York and Texas. We can issue reciprocal credit for attorneys licensed in Connecticut, Florida and New Jersey. We will apply for credit in Colorado, North Carolina and Virginia (subject to MCLE Board approval). For jurisdictions not listed, attendees are provided with a Universal Certificate of Attendance. New York licensed attorneys: Transitional/Appropriate for newly admitted and experienced attorneys. Financial aid is available for qualifying lawyers. For CLE-related questions, please contact Gisel Arias, King & Spalding, 1180 Peachtree Street NE, Atlanta, GA 30309. CA Provider #10947.

Event Details

Date: December 1, 2021

Time: 1:00 pm (ET)


Please register soon. You do not have to be a client to attend, and there is no charge.