Tag

Incident Response

Explores the strategies, frameworks, and best practices organizations use to detect, contain, and recover from cybersecurity incidents. Articles cover team roles, communication protocols, forensic analysis, and lessons learned from real-world security breaches.

posts

Cyber Incident Reporting

How to Report a Cyber Incident: A Step-by-Step Guide

In 2023, the FBI's Internet Crime Complaint Center received over 880,000 complaints with potential losses exceeding $12.5 billion — a 22% increase in losses from the year before. Yet the FBI estimates a massive number of cyber incidents still go unreported. That gap between what happens and

Carl B. Johnson May 23, 2026 5 min read
Incident Response Plan Template

Incident Response Plan Template: Build Yours in 2026

A Ransomware Attack Every 11 Seconds — and Most Victims Had No Plan When Colonial Pipeline got hit in May 2021, the company paid a $4.4 million ransom within hours. Their CEO later told a Senate committee that the decision was made under extreme pressure, without a well-rehearsed playbook. If

Carl B. Johnson May 16, 2026 5 min read
Ransomware Attack Prevention

Ransomware Attack Prevention: What Actually Works in 2026

A Single Click Cost Change Healthcare $22 Million in Ransom In February 2024, the BlackCat/ALPHV ransomware group crippled Change Healthcare — a company processing roughly one-third of all U.S. health claims. UnitedHealth Group confirmed paying a $22 million ransom. Patient data for over 100 million individuals was compromised. The

Carl B. Johnson May 14, 2026 5 min read
Ransomware Recovery Steps

Ransomware Recovery Steps: A Battle-Tested Playbook

In February 2024, Change Healthcare — a subsidiary processing roughly one-third of all U.S. medical claims — was hit by the ALPHV/BlackCat ransomware group. The attack disrupted pharmacy operations nationwide for weeks, cost UnitedHealth Group an estimated $872 million in the first quarter alone, and exposed the personal health data

Carl B. Johnson Apr 25, 2026 5 min read
Incident Response

How to Respond to a Cyberattack: A Practical Guide

In February 2024, Change Healthcare — the largest medical claims processor in the United States — was hit by the ALPHV/BlackCat ransomware group. The attack disrupted billing systems for hospitals and pharmacies nationwide for weeks. UnitedHealth Group later confirmed the breach affected approximately 100 million individuals. If you think your organization

Carl B. Johnson Apr 25, 2026 5 min read
Data Breach Reporting

How to Report a Data Breach: A Step-by-Step Guide

The Clock Starts Ticking the Second You Discover a Breach In March 2024, Change Healthcare suffered a ransomware attack that exposed the protected health information of over 100 million individuals. The fallout wasn't just technical — it was a cascading failure in communication, notification, and reporting that took months

Carl B. Johnson Apr 19, 2026 6 min read
Ransomware Recovery

Ransomware Recovery Steps: A Battle-Tested Playbook

The Clock Starts the Moment You See the Ransom Note In February 2024, Change Healthcare — one of the largest health payment processors in the United States — was hit by the ALPHV/BlackCat ransomware group. The attack disrupted pharmacy operations, delayed insurance claims, and affected an estimated one-third of all Americans&

Carl B. Johnson Apr 14, 2026 5 min read
Ransomware Attack Prevention

Ransomware Attack Prevention: A 2025 Survival Guide

In February 2024, Change Healthcare — a company that processes roughly one-third of all U.S. medical claims — was hit by the ALPHV/BlackCat ransomware group. The fallout was staggering: $872 million in direct costs reported by UnitedHealth Group in a single quarter, pharmacies unable to process prescriptions, and the personal

Carl B. Johnson Aug 11, 2025 7 min read
Ransomware

What Is Ransomware? A Security Pro's Blunt Guide

A Single Click That Cost a Hospital $22 Million In February 2024, Change Healthcare — the payment processing backbone for thousands of U.S. hospitals and pharmacies — was hit by the ALPHV/BlackCat ransomware group. UnitedHealth Group, its parent company, confirmed paying approximately $22 million in ransom. The attack disrupted prescription

Carl B. Johnson Aug 11, 2025 7 min read