Companies Struggle to Recover From CrowdStrike’s Crippling Falcon Update

The cybersecurity firm says that 97% of sensors are back online, but some organizations continue to recover with costs tallied at $5.4 billion for the Fortune 500 alone.
Pulled Health-ISAC quote:
Healthcare companies are among the most impacted organizations, with the corrupt file affecting about half the members of the Health Information Sharing and Analysis Center, says Errol Weiss, chief security officer for the Health-ISAC. As of July 25, only 18% of affected organizations had fully recovered their systems, while three-quarters of companies still had up to 25% of their systems still needing attention, Weiss says.
Many organizations had Windows-based medical devices, and now they are likely looking at a long-tailed recovery, says Weiss.
“My guess is that a lot of automated remediation was shared on Friday and Saturday—those methods probably helped a lot to get to the majority of completion,” he says, referring to tools and scripts provided by Microsoft, CrowdStrike, and other companies. “But some of those scripts and automated fixes probably won’t work on the kinds of devices that we’re talking about, and now healthcare organizations have to take a manual look.”
Read the full article in Dark Reading here:
https://www.darkreading.com/cybersecurity-operations/companies-struggle-to-recover-from-crowdstrike-crippling-falcon-update
- Related Resources & News
- Health-ISAC whitepaper highlights cybersecurity responsibilities in medical device lifecycle, focuses on resilience
- Health-ISAC Hacking Healthcare 2-3-2025
- Exploring the Cybersecurity Roles of Manufacturers and Healthcare Organizations During the Medical Device Lifecycle
- Impacts of Proposed US Import Tariffs on the Global Health Sector
- NY Blood Center Attack Disrupts Suppliers in Several States
- 2025 Newsletter – February
- DeepSeek’s Security Risk Is A Critical Reminder For CIOs
- $6.4m to combat health sector cyber threat
- Threat Bulletin: SimpleHelp RMM Software Leveraged in Exploitation Attempt to Breach Networks
- EU Commission Calls for Health Sector ‘Cyber Action Plan’