The cliche goes “You’re only as strong as your weakest link.” A recent security incident proved that cliche to be true. In this incident, the weak link was a cloud provider to a backup service provider for dental practices across the United States. That’s not confusing at all, is it?

What Happened?

Dental practices can utilize a variety of services provided by Digital Dental Record (DDR). PerCSoft provides cloud remote management to DDR. On the morning of August 26, PerCSoft suffered a ransomware attack.

Due to the backup system’s remote access, the attack encrypted the local files of about 400 dental practices. For some of those, the attack affected their practice management software. Some practices even lost the ability to take x-rays.

Another Payday

PerCSoft opted fairly quickly to pay the ransom in exchange for decryption keys. They released no information regarding payment, so the amount is unknown. Their support team has been working ever since to restore client systems to full functionality. They’ve restored most DDR clients, but some are still waiting.

This attack once again shows how cybercriminals have shifted their focus to bigger paydays. More and more, we’re seeing attacks target companies that may serve as a gateway to other organizations. In this scenario, one attack indirectly hit over 400 other targets. We saw a similar attack recently against another cloud provider.

To Pay or Not To Pay

Paying the ransom potentially solves the problem more quickly. However, it rewards cybercriminals for their efforts and encourages them to continue. The FBI released a brief podcast recently warning victims not to pay. Instead, they recommend contacting the FBI. The FBI will then help determine the best course of action to take. That’s a tough decision if your business is at a standstill.

Do you know how your organization would handle a situation like this? What’s your business continuity plan? We can help prepare your organization to minimize downtime in the event of a ransomware attack. Don’t wait for an attack to strike. Request a consultation today.

Get a FREE IT Consultation!

Start Now