Healthcare Industry

Threat actors in the Healthcare sector target executives, employees, and contractors with privileged technical access to operational technology and the Internet of Medical Things (IoMT). Front desk employees with privileged access to patient information are also being targeted. The attackers’ main motive is financial, and their main goal is to deploy and detonate ransomware payloads and steal patient information, which they can sell on the dark web. They rely on spear phishing and exploit infrastructure and supply chain vulnerabilities (human and technical) to execute their attack plan. But first, they conduct target reconnaissance to identify opportunities to attack and build dossiers of their intended victims by leveraging open source intelligence sources (OSINT) in the open, deep, and dark web, looking at professional and personal digital identities.

Picnic taps into the same OSINT sources cyber criminals use, and it operates its proprietary technology to analyze human risk, predict attack pathways, and deliver prioritized remediations that harden your human attack surface to prevent social engineering attacks that impact healthcare services. By partnering with Picnic to make their organizations a tough target for attackers very early in the attack planning phase, our customers see a quantifiable reduction in impersonation, spear phishing, and credential stuffing attacks, closing the door to data theft, ransomware, and extortion before it can happen.