When #CISA, #HHS, and the #FBI issue a joint advisory naming a specific ransomware group and calling out healthcare as a targeted sector, that is not a signal to schedule a review meeting. It is a directive to validate your controls this week. The #Medusa ransomware group has compromised more than 500 critical infrastructure organizations, and the federal government has been unambiguous: healthcare is in the target set. The question for every health plan, hospital system, and