Surviving a Cyberattack: The Harsh Reality of an Orthodontic Data Breach

Guest: Gary Salman, CEO of Black Talon Security

Episode Description: In this episode of the Orthodontic Products Podcast, host Alison Werner sits down with Gary Salman, CEO of Black Talon Security, to recap a sobering panel from the recent AAO Annual Session on the realities of cybercrime in the orthodontic industry. Moving past standard prevention advice, they delve into the harsh reality of navigating a data breach, highlighting the real-world ransomware attack experienced by orthodontist Dr Kenneth Webb. Salman shares critical insights on the immediate steps a practice must take upon discovering a breach, the severe legal and law enforcement implications, and why relying solely on cloud-based practice management software does not absolve a practice of HIPAA liability or protect it from catastrophic class-action lawsuits.

Topics Covered:

The realities of a ransomware attack, highlighted by a real-world orthodontic case study.Why cloud-based practice management software does not guarantee immunity from data breaches.The critical first steps to take immediately after discovering a network intrusion (and why you shouldn't just turn off your computers).How mishandling the initial response can trigger mandatory HIPAA reporting and legal action.The crucial difference between standard IT support and specialized cybersecurity experts.

Chapters:

01:33 - Recap of the AAO Cybercrime Panel

03:01 - Case Study: Dr Webb’s Ransomware Attack

05:14 - How Hackers Target Orthodontic Practices

09:39 - The First Steps to Take During a Cyberattack

12:28 - Why Hackers Search for Your Cyber Insurance Policy

14:35 - Treating Your Network Like a Crime Scene (HIPAA Reporting)

18:20 - The Threat of Immediate Class Action Lawsuits