Lessons Learned From the Sky Lakes Medical Center Ransomware Attack of 2020

Lessons learned

Watch the webinar

March 9, 2021 12:00 p.m. – 1:30 p.m


When Oregon’s Sky Lakes Medical Center discovered several of their computer systems were encrypted by ransomware in October 2020, they took immediate action to prevent further damage. State and local institutions are increasingly targeted by cyberattacks as criminals study such incidents and seek to replicate them. To share the lessons learned from this attack, the Mark O. Hatfield Center for Cybersecurity is hosting a virtual discussion on what mitigated the impact of the attack. Oregon’s community can come together in this space to prepare for future attacks, especially during a pandemic when patients’ lives are already vulnerable.

Moderated by Ron Buchanan, Chief Information Security Officer (CISO) for the St. Charles Health System in Bend, Oregon, the discussion featured John Gaede, Sky Lakes Medical Center’s Director of Information Services, as well as Art Ehuan, Vice President from The Crypsis Group cybersecurity service..

Panelists

John Gaede 

John Gaede is the Director of Information Services at Sky Lakes Medical Center, a nonprofit community hospital in South Central Oregon. He has twenty years of professional Information Technology leadership in healthcare, with nine years of clinical experience as a clinical laboratory scientist. 

Ronald Buchanan

Ronald Buchanan is Chief Information Security Officer for the St. Charles Health System in Bend, Oregon. Prior, he was CISO for the state of Washington and Chief Information Risk Officer and Director, Information Security & Privacy Office, for Oregon’s Department of Human Services and the Oregon Health Authority. Ron has also been a consultant for the Federal Bureau of Investigation’s Criminal Justice Information Services (CJIS) Division, and served as a civilian Supervisory Special Agent with the Air Force Office of Special Investigations focused on cybercrime and counterintelligence investigations and operations in the US, Europe, and Asia.

Art Ehuan

Art Ehuan is a vice president of The Crypsis Group/Palo Alto Networks (PAN) company. He joined Crypsis after running the Global Cyber Risk Services practice at the global professional services firm Alvarez & Marsal. Art has worked with governments and law enforcement in the U.S. and overseas on cybersecurity cases, frequently giving expert testimony in federal, military, and state courts on digital forensics and cybercrime matters. For nearly two decades he has served as a lecturer for the U.S. State Department’s Anti-Terrorism Assistance Cyber Training Program, while also working as a supervisory special agent with the Federal Bureau of Investigation (FBI) and a special agent for the U.S. Air Force Office of Special Investigations. Art has been retained as a cyber expert on prominent data breaches to include Sony Pictures, Target, Anthem, Equifax, Marriott and Capital One.