Healthcare Providers Must Plan for Ransomware Attacks on Third-Party Suppliers

The AHA and Health-ISAC issued a joint threat bulletin after ransomware attacks on blood suppliers (OneBlood, Synnovis, Octapharma) caused major shipping delays, canceled donations across states, delayed surgeries in London, and led to theft of donor PHI; the advisory urges healthcare organizations to identify mission-critical vendors, include them in enterprise risk and emergency plans, and develop multidisciplinary third‑party risk management to mitigate supply‑chain and patient‑care disruptions.