Hobby Exercise 2023 After Action Report

Executive Summary
TLP: WHITE This report may be shared without restriction.
Note: Health-ISAC Members may download the full version of the report from the Health-ISAC Threat Intelligence Portal (HTIP). Contact Membership Services for assistance.
In October 2023, Health-ISAC facilitated an all-day workshop and tabletop exercise with Health-ISAC Members and United States Government (USG) agencies in Washington, DC.
The 2023 U.S. Hobby Exercise included participants from Health-ISAC, healthcare delivery organizations (HDOs), medical device manufacturers (MDMs), pharmaceutical organizations, and federal government agencies including the Department of Health and Human Services (HHS), Food & Drug Administration (FDA), Federal Bureau of Investigation (FBI), and Department of Homeland Security (DHS).
KEY RECOMMENDATIONS
The report contains recommendations for the three major stakeholder groups participating in the exercise, including Health-ISAC, Government agencies, and Private Sector organizations.
PDF:
- Related Resources & News
- What do cybersecurity leaders want in staff? These 3 skills beat certifications and experience
- Continuous attack surface monitoring and sophisticated social engineering assessment
- Hospital Networks are Becoming Targets in Cyberwarfare, and They’re Unequipped to Deal With It
- Human Risk Management Purchasing Toolkit
- Op-Ed: Calphishing is challenging how we think about phishing
- DentaQuest Data Theft Hack Affects 15M Patients
- Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare
- Health-ISAC Monthly Newsletter – August 2026
- Health-ISAC Hacking Healthcare 8-3-2026
- Health-ISAC Survey Reveals Recovery is Weakest Link in Cyber Maturity