IHA Daily Briefing: October 23

Advisory: Malicious Activity by SafePay Ransomware Group

A joint advisory was issued this week warning of recent activity by the SafePay Ransomware group. SafePay Ransomware has been highly active since 2024, targeting healthcare and other critical infrastructure organizations. The advisory said SafePay actors typically gain access to networks by stealing or guessing passwords, exploiting vulnerabilities in security systems and using phishing tactics. Once inside the network SafePay actors create new accounts or take over existing ones, and then use legitimate system tools to move through the network, identify valuable files and disable security protections to avoid detection. The actors then encrypt the victim's files and leave a ransom note demanding payment in cryptocurrency. The advisory includes recommended security measures to reduce the risk of SafePay ransomware attacks.

KFF: Premiums for Employer-based Family Coverage Topped $28K in 2026

Annual premiums for employer-sponsored family health coverage reached $28,303 this year, 5% higher than in 2025, according to the latest KFF annual survey on employer health benefits. On average, in 2026 covered workers contributed $7,471 toward the cost of family coverage. The average deductible among covered workers in a plan with a general annual deductible was $1,955 for single coverage, compared to $1,886 in 2025. Strategies used by employers to mitigate rising premiums included direct contracting with healthcare providers, establishing on-site and near-site clinics, changing insurers, implementing a tiered or narrow network, and reducing eligibility for certain benefits.

HHS Unveils Plan to Combat Alzheimer's and Dementia

The U.S. Dept. of Health and Human Services (HHS) yesterday announced the 2026 update to the "National Plan to Address Alzheimer's Disease and Related Dementias." HHS said the updated plan places greater emphasis on reducing dementia risk across the lifespan and translating scientific discoveries into better prevention, diagnosis, treatment, and care. It also formally recognizes related dementias in the plan's title, following public input about the challenges faced by patients and families living with different forms of dementia.

HHS said it is advancing new and ongoing initiatives across 10 agencies, including the launch of an Alzheimer's Prevention Accelerator to advance the development of new approaches to prevention. The Advanced Research Projects Agency for Health will also invest up to $48.8 million in projects focused on earlier detection and intervention. Other HHS initiatives will expand dementia training and screening in health centers; develop behavioral health and crisis response resources for older adults experiencing cognitive decline; strengthen public health approaches to dementia; study diagnostic delays and the economic burden of dementia; review evidence on prevention; and test a lifestyle intervention for beneficiaries with mild cognitive impairment.

FDA Issues Import Alert for Certain Medical Devices Manufactured in Japan

The Food and Drug Administration (FDA) this week issued an import alert to healthcare providers, flagging concerns about certain medical devices manufactured in Japan by Olympus Medical Systems Corporation and its subsidiaries. Despite extensive and ongoing efforts to address compliance issues, the FDA said it continues to have concerns related to outstanding quality system regulation violations by Olympus. Therefore, the FDA issued the import alert to prevent future shipments of certain devices from entering the United States, including specific models of enteroscopes, ingestible telemetric gastrointestinal capsule imaging systems, bronchoscopes, laparoscopes, ureterorenoscopes and automated endoscope reprocessors.

Illinois Respiratory Disease Surveillance Data

The Infectious Respiratory Disease Surveillance Dashboard from the Illinois Dept. of Public Health (IDPH) provides the latest data on hospital visits, seasonal trends, lab test positivity and demographic data. IDPH also tracks COVID-19, influenza and respiratory syncytial virus information through the Illinois Wastewater Surveillance System dashboard.

Briefly Noted

The U.S. Dept. of Health and Human Services (HHS) and U.S. Dept. of Justice's Civil Division this week launched a six-month Healthcare False Claims Act Self-Disclosure Pilot Program for healthcare companies that voluntarily disclose potential civil violations of the federal False Claims Act. Companies that meet the pilot's requirements can resolve disclosed conduct through a coordinated civil release from liability under the federal False Claims Act and certain HHS administrative authorities. Click herefor more information.

Leading the News

What Epic revealed at its developer conference: 10 takeaways

Becker's Hospital Review

Epic used its developer conference to open more of its platform to outside AI and apps, and to remind those developers that the traffic they generate lands on health systems' infrastructure.

14 Joint Commission moves in 2026

Becker's Hospital Review

So far in 2026, The Joint Commission has announced a CEO transition plan, launched two outcomes-driven certifications and condensed serious safety event lists.

TAVR is costly. Here's how hospitals make the procedure pay off

Modern Healthcare

Hospitals running transcatheter aortic valve replacement programs often face a difficult balancing act to control costs while maintaining high-quality patient care. Medicare reimbursement for TAVR, a minimally invasive procedure that replaces narrowed aortic valves, falls short of covering hospitals' costs or covers them with little to no margin, providers say.