Hobby Exercise 2023 After Action Report

Executive Summary
TLP: WHITE This report may be shared without restriction.
Note: Health-ISAC Members may download the full version of the report from the Health-ISAC Threat Intelligence Portal (HTIP). Contact Membership Services for assistance.
In October 2023, Health-ISAC facilitated an all-day workshop and tabletop exercise with Health-ISAC Members and United States Government (USG) agencies in Washington, DC.
The 2023 U.S. Hobby Exercise included participants from Health-ISAC, healthcare delivery organizations (HDOs), medical device manufacturers (MDMs), pharmaceutical organizations, and federal government agencies including the Department of Health and Human Services (HHS), Food & Drug Administration (FDA), Federal Bureau of Investigation (FBI), and Department of Homeland Security (DHS).
KEY RECOMMENDATIONS
The report contains recommendations for the three major stakeholder groups participating in the exercise, including Health-ISAC, Government agencies, and Private Sector organizations.
PDF:
- Related Resources & News
- Potential Terror Threat Targeted at Health Sector – AHA & Health-ISAC Joint Threat Bulletin
- New Cybersecurity Policies Could Protect Patient Health Data
- CyberWire Podcast: PHP flaw sparks global attack wave
- Health-ISAC Hacking Healthcare 3-14-2025
- HSCC Aiming to Identify Healthcare Workflow Chokepoints
- New Healthcare Security Benchmark Highlights Key Investment Priorities and Risks
- Are Efforts to Help Secure Rural Hospitals Doing Any Good?
- CISA cuts $10 million annually from ISAC funding for states amid wider cyber cuts
- 2024 Health-ISAC Discussion Based Exercise Series After-Action Report
- Cobalt Strike takedown effort cuts cracked versions by 80%