Hobby Exercise 2023 After Action Report

Executive Summary
TLP: WHITE This report may be shared without restriction.
Note: Health-ISAC Members may download the full version of the report from the Health-ISAC Threat Intelligence Portal (HTIP). Contact Membership Services for assistance.
In October 2023, Health-ISAC facilitated an all-day workshop and tabletop exercise with Health-ISAC Members and United States Government (USG) agencies in Washington, DC.
The 2023 U.S. Hobby Exercise included participants from Health-ISAC, healthcare delivery organizations (HDOs), medical device manufacturers (MDMs), pharmaceutical organizations, and federal government agencies including the Department of Health and Human Services (HHS), Food & Drug Administration (FDA), Federal Bureau of Investigation (FBI), and Department of Homeland Security (DHS).
KEY RECOMMENDATIONS
The report contains recommendations for the three major stakeholder groups participating in the exercise, including Health-ISAC, Government agencies, and Private Sector organizations.
PDF:
- Related Resources & News
- Healthcare Heartbeat 2024 Q4
- Health-ISAC Hacking Healthcare 2-19-2025
- Podcast: Reflecting on the Change Healthcare cyberattack
- Senate Confirms Trump Pick RFK Jr. to Lead HHS
- The Alarming Backdoor Hiding in 2 Chinese Patient Monitors
- Health-ISAC 2025 Health Sector Cyber Threat Landscape
- How Health Systems Manage Security in the Cloud
- Change Healthcare Attack a Wake-up Call for the Industry
- Five High-Impact Cyberattacks Healthcare Industry Should Avoid in 2025
- Health-ISAC Hacking Healthcare 2-11-2025