CISA proposes rule for hospitals to disclose ransom payments

Hospitals and health systems may soon need to report a cybersecurity incident to the federal government within 72 hours and ransom payments within 24 hours.