
UC Cybersecurity experts weigh in on the threat of hacking groups
Local media turned to professors with the School of IT for advice and context amid recent attacks
When a ransomware attack on Kettering Health made national headlines, local outlets turned to University of Cincinnati’s cyber experts for context and scope regarding the developing story.
Richard Harknett, PhD, and Jacques Bou Abdo, PhD, explained to media what drives ransomware attacks, why health institutions are a common target and what to look out for as a customer.
Richard Harknett adds insights
Harknett is co-director of the Ohio Cyber Range Institute, chair of the Center for Cyber Strategy and Policy and director of the School of Public and International Affairs at the University of Cincinnati. He holds an affiliate faculty position with the University’s School of Information Technology.
“This has all of the markings of what we call a ransomware attack,” he told Fox 19.
Harknett said that Kettering Health’s decision to mitigate and monitor, while still operating its emergency services, was the best way to manage the threat in the short-term.
“In this case we call it cyber-resiliency. How resilient are you? Can you get your operations back up and running in a quick way?” he said.
Harknett also told WCPO that health care providers are a preferred target of cyber crime due to the sensitive data they hold. "They have a lot of valuable data, a lot of personal data. But they also have urgency," said Harknett. The stakes are higher when organizations need their technology back to smoothly run hospital and emergency operations.
"If some of this data leaks, then there will be other kinds of criminal actors who then try to scam down the road," he added.
Harknett said the number of cybergangs specializing in ransomware has nearly doubled in the last two years.
Harknett also broke down the modus operandi of many of these groups to the Dayton Daily News. “If we’re dealing with ransomware, one of the reasons that the health sector is seeing an increase in these types of attacks is, when you’re engaged in extortion, you want to coerce the other side to give you money. You want them to feel as much urgency as possible,” he said.
He explained that these types of groups typically have reputations they wish to uphold in their circles, and usually are unlikely to leak consumer data if the ransom terms are met. Then after the conclusion of an attack, they usually publicly reveal themselves.
“These are not your basement hooded hackers,” Harknett said.
Jacques Bou Abdo shares perspective
Jacques Bou Abdo, assistant professor at the School of IT, weighed in on ransomware attacks as well.
"Many times hospitals have paid ransoms in order to recover patient data, because it's just not the data that's important, it's the medical record of patients,” he told WLWT. “It's the current procedures and current treatment plans we have for patients.”
He told Spectrum News that “all of the components that have interplayed in this attack have been seen before."
Bou Adbo added that on top of the urgency, health companies are a target because of just how much of their equipment stores important information. Imaging systems, internal software and online patient portals — where patients often pay their bills — are just a few of many.
He suggested requiring more cyber protections by law to help prevent future attacks. “Collectively, the people can force federal agencies or congress to have stricter regulations," he said.
Read the reports from Fox 19, WCPO, Dayton Daily News, Spectrum News 1 and WLWT.
Featured image at top of typing on a computer with code overlay. Photo/Adobe Stock
Related Stories
UC IT, design professors team up to reduce waste in fashion industry
July 14, 2020
UC professor Murat Ozer collaborates with the faculty of DAAP to use technology to create a solution for waste in the fashion industry.
Media highlight UC’s partnership with Ohio courts
October 5, 2021
The University of Cincinnati and the Ohio Criminal Sentencing Commission on Monday celebrated a partnership to create the Ohio Sentencing Data Platform, an event that received media coverage throughout Ohio.
Bats face an existential crisis, a new study offers hope
July 31, 2024

Joseph Johnson, an ecologist and UC assistant professor of information technology, speaks to Salon about a new bat study. Johnson is widely known as an ecologist who studies a specific little brown bat native to Ohio, the Myotis lucifugus aka the little brown myotis.