Key Takeaways:

• The New York State Department of Health has issued a formal cybersecurity advisory (Notification 114377) urging heightened vigilance across the state’s healthcare infrastructure.
• The alert stems from rising cyberthreats linked to international conflict, specifically following recent military strikes involving Iran.
• Providers are encouraged to implement advanced threat detection, review operational technology (OT) segmentation, and prepare for disruptions ranging from DDoS to ransomware.
• The advisory applies to hospitals, nursing homes, home care, hospice, dialysis centers, and other healthcare entities.
• Reporting channels and emergency response protocols have been activated, with the NYS DOH Surge Operations Center standing by to assist.

Article:

The New York State Department of Health (NYSDOH) has released an urgent advisory alerting healthcare organizations across the state to a growing cybersecurity threat environment. This warning comes on the heels of U.S. military action targeting Iranian nuclear sites and the subsequent expectation of retaliatory cyber operations by Iranian-backed threat groups.

Notification 114377, issued through the Healthcare Association of New York State (HANYS), outlines specific concerns about potential cyberattacks targeting healthcare systems, public health infrastructure, and operational technology environments. According to the alert, providers should assume an elevated risk posture immediately.

The NYS Department of Health wrote that it is “closely monitoring the situation in the Middle East and its potential impact on critical infrastructure sectors across the U.S., particularly healthcare and public health systems.”

The agency emphasized that while no specific attack has yet occurred within the state’s healthcare systems, historical behavior of Iranian-aligned threat actors suggests a high likelihood of activity targeting both public and private institutions during periods of geopolitical escalation.

The advisory applies broadly across the healthcare landscape, including hospitals, long-term care facilities, diagnostic and treatment centers, adult care facilities, hospice agencies, dialysis centers, home care providers, and public health departments.

Threat Scenarios Outlined by NYS DOH

According to the document, likely attack vectors include denial-of-service (DoS) attacks aimed at disrupting service availability, ransomware infections that lock down electronic health records or clinical systems, website defacements that undermine public trust, and targeted compromises of industrial and operational technology systems.

Of particular concern is the targeting of OT—systems responsible for critical functions like HVAC, imaging, infusion pumps, lab automation, and more. These systems, while often isolated in theory, are frequently exposed through improperly segmented networks or outdated remote access protocols.

The advisory instructs facilities to conduct rapid assessments of their OT environments, looking for unnecessary internet connectivity, weak password enforcement, and poor visibility into asset inventories.

Recommended Actions for Healthcare Entities

The NYS Department of Health outlines a series of immediate steps healthcare providers should take:

1. Review and reinforce cybersecurity practices: Organizations are instructed to validate endpoint detection, review firewall configurations, disable unused remote access services, and confirm the integrity of logging and alerting infrastructure.
2. Backup and recovery validation: Facilities should ensure that data backups are not only current and segmented from core systems but also verified through regular restoration testing.
3. Operational Technology (OT) assessment: Providers must isolate OT systems from public-facing internet pathways, ensure strong authentication for access, and implement strict network segmentation between IT and OT assets.
4. Physical security coordination: The alert reminds organizations that physical intrusions can be part of coordinated attack campaigns. Security of server rooms, OT panels, and network hubs should be reevaluated.
5. Incident response plan updates: Teams should revisit and rehearse their cyber incident playbooks, including communication trees, escalation protocols, and third-party coordination.
6. Mandatory and recommended reporting: While hospitals are required to report cybersecurity incidents under NYS regulation 405.46, the DOH “strongly encourages” all healthcare-related organizations to report suspicious activity or confirmed incidents. The DOH Surge Operations Center is available 24/7 at 917-909-2676.
7. Regular coordination with vendors: IT partners, especially managed service providers (MSPs), should be looped into all planning conversations. Their awareness and alignment on threat readiness can improve response time dramatically in the event of an incident.

Why Healthcare is a Target

Healthcare systems are increasingly seen as attractive targets by advanced threat actors due to their data richness, limited tolerance for downtime, and often inadequate segmentation of legacy systems. Additionally, many smaller providers continue to rely on aging infrastructure that is difficult to patch or monitor effectively.

Given this environment, state-level health departments—particularly NYS DOH—have taken on a more proactive role in driving threat awareness and response coordination. The timing of this alert is significant, not only in the context of international conflict but also amid an ongoing surge in healthcare-targeted ransomware activity across the U.S.

A Role for Service Providers

Managed service providers such as Apex Technology Services and others working in the tri-state area play a key role in helping providers execute the recommendations laid out in the advisory. From deploying security tools and conducting network audits to creating breach-ready backup environments, these partners are often the first line of defense for smaller institutions without in-house security expertise.

The ability of healthcare organizations to respond effectively in the days and weeks ahead will depend heavily on preparedness, vendor coordination, and executive leadership that prioritizes security not just as an IT function, but as a patient safety issue.

The Road Ahead

As the situation involving Iran evolves, additional federal or state-level guidance may follow. The Department of Health has committed to updating stakeholders as new intelligence becomes available.

In the meantime, healthcare providers should treat this advisory not as a theoretical warning, but as a call to immediate action. Proactive preparation now can reduce the risk of operational disruption, protect sensitive patient information, and preserve public trust at a time when cyber threats are increasingly entwined with global political developments.