--- title: Healthcare Needs Active Defense - ClearDATA description: "\"We do expect Log4Shell to be used in intrusions well into the future,\" CISA Director Jen Easterly In December 2021, over 100 ClearDATA clients were" --- [Log in to the CyberHealth™ Platform](http://cyberhealth.cleardata.com/) [Talk to a Cloud Expert](https://www.cleardata.com/consultation/) [![Clear data](https://cspm.cleardata.com/hubfs/Cleardata_February2025/images/cleardata-logo.svg)](https://www.cleardata.com/) - [CSPM for Healthcare](https://www.cleardata.com/cspm) - - [Safeguards: HIPAA, HITRUST, GDPR, ISO, NIST, PCI](https://www.cleardata.com/cspm/#cspm-features) - [Automated Compliance](https://www.cleardata.com/cspm/#cspm-features) - [Cloud Risk Identification & Remediation](https://www.cleardata.com/cspm/#cspm-features) - [Compliance Risk Scores](https://www.cleardata.com/cspm/#cspm-features) - [PHI Leak Discovery](https://www.cleardata.com/cspm/#cspm-features) - [Audit-Ready Reporting](https://www.cleardata.com/cspm/#cspm-features) - Services - Managed Services - [Cloud Compliance](https://www.cleardata.com/cloud-compliance/) - [Managed Detection & Response](https://www.cleardata.com/cspm/managed-detection-and-response/) - [Cloud Operations](https://www.cleardata.com/cspm/cloud-operations/) - [Professional Services](https://www.cleardata.com/cspm/cloud-transformation/) - [Cloud Migration & Modernization](https://www.cleardata.com/cspm/cloud-transformation/#migration) - [Cloud Assessments](https://www.cleardata.com/cspm/cloud-transformation/#assessments) - [End-to-End Cloud Resilience](https://www.cleardata.com/cspm/cloud-transformation/#end2end) - Solutions - By Market - [Healthcare Software & Services](https://www.cleardata.com/solutions-by-market/healthcare-software-services/) - [Medical Devices & Equipment](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Providers](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Payers](https://www.cleardata.com/solutions-by-market/healthcare-payers/) - By Topic - - [Risk Visualization & Prioritization](https://www.cleardata.com/risk-visualization-prioritization/) - [Threat Detection & Protection](https://www.cleardata.com/security-threat-protection/) - [Cost & Performance Optimization](https://www.cleardata.com/cost-performance-optimization/) - [Healthcare Cloud Compliance](https://www.cleardata.com/healthcare-cloud-compliance/) - [Analytics & Reporting](https://www.cleardata.com/analytics-reporting/) - [GxP for Life Sciences](https://www.cleardata.com/gxp-life-sciences/) - [EHR Deployments in the Cloud](https://www.cleardata.com/ehr-cloud-deployments/) - Resources - - [View All](https://www.cleardata.com/resources/) - [Blog](https://www.cleardata.com/blog/) - [What Is Compliance Debt?](https://www.cleardata.com/blog/eliminating-compliance-debt-the-key-to-healthcare-tech-innovation/) - [Customer Stories](https://www.cleardata.com/stories/) - [Events](https://www.cleardata.com/events/) - [About](https://www.cleardata.com/about-us/) - - [Leadership Team](https://www.cleardata.com/about-us/leadership-team/) - [Careers](https://www.cleardata.com/about-us/careers/) - [News](https://www.cleardata.com/about-us/news/) - [Partners](https://www.cleardata.com/supported-clouds/) - [CSPM for Healthcare](https://www.cleardata.com/cspm) - - [Safeguards: HIPAA, HITRUST, GDPR, ISO, NIST, PCI](https://www.cleardata.com/cspm/#cspm-features) - [Automated Compliance](https://www.cleardata.com/cspm/#cspm-features) - [Cloud Risk Identification & Remediation](https://www.cleardata.com/cspm/#cspm-features) - [Compliance Risk Scores](https://www.cleardata.com/cspm/#cspm-features) - [PHI Leak Discovery](https://www.cleardata.com/cspm/#cspm-features) - [Audit-Ready Reporting](https://www.cleardata.com/cspm/#cspm-features) - Services - Managed Services - [Cloud Compliance](https://www.cleardata.com/cloud-compliance/) - [Managed Detection & Response](https://www.cleardata.com/cspm/managed-detection-and-response/) - [Cloud Operations](https://www.cleardata.com/cspm/cloud-operations/) - [Professional Services](https://www.cleardata.com/cspm/cloud-transformation/) - [Cloud Migration & Modernization](https://www.cleardata.com/cspm/cloud-transformation/#migration) - [Cloud Assessments](https://www.cleardata.com/cspm/cloud-transformation/#assessments) - [End-to-End Cloud Resilience](https://www.cleardata.com/cspm/cloud-transformation/#end2end) - Solutions - By Market - [Healthcare Software & Services](https://www.cleardata.com/solutions-by-market/healthcare-software-services/) - [Medical Devices & Equipment](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Providers](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Payers](https://www.cleardata.com/solutions-by-market/healthcare-payers/) - By Topic - - [Risk Visualization & Prioritization](https://www.cleardata.com/risk-visualization-prioritization/) - [Threat Detection & Protection](https://www.cleardata.com/security-threat-protection/) - [Cost & Performance Optimization](https://www.cleardata.com/cost-performance-optimization/) - [Healthcare Cloud Compliance](https://www.cleardata.com/healthcare-cloud-compliance/) - [Analytics & Reporting](https://www.cleardata.com/analytics-reporting/) - [GxP for Life Sciences](https://www.cleardata.com/gxp-life-sciences/) - [EHR Deployments in the Cloud](https://www.cleardata.com/ehr-cloud-deployments/) - Resources - - [View All](https://www.cleardata.com/resources/) - [Blog](https://www.cleardata.com/blog/) - [What Is Compliance Debt?](https://www.cleardata.com/blog/eliminating-compliance-debt-the-key-to-healthcare-tech-innovation/) - [Customer Stories](https://www.cleardata.com/stories/) - [Events](https://www.cleardata.com/events/) - [About](https://www.cleardata.com/about-us/) - - [Leadership Team](https://www.cleardata.com/about-us/leadership-team/) - [Careers](https://www.cleardata.com/about-us/careers/) - [News](https://www.cleardata.com/about-us/news/) - [Partners](https://www.cleardata.com/supported-clouds/) # Healthcare Needs Active Defense May 9, 2022 3 minute read [mailto:?body=https://cspm.cleardata.com/cleardata-blog/blog/healthcare-needs-active-defense](mailto:?body=https://cspm.cleardata.com/cleardata-blog/blog/healthcare-needs-active-defense) ### [![2024-Threat-Report-data-1](https://cspm.cleardata.com/hubfs/Cleardata_February2025/images/2024-Threat-Report-data-1.jpg) Guide 2024 Healthcare Threat Report Learn More](https://www.cleardata.com/resources/healthcare-threat-report/) #### Table of Contents ***“We do expect Log4Shell to be used in intrusions well into the future,” [CISA](https://www.cleardata.com/blog/reducing-successful-cyber-attack-vectors/) Director Jen Easterly*** In December 2021, over 100 [ClearDATA](https://www.cleardata.com/) clients were attacked via Log4j putting over 550 mission-critical workloads at [risk](https://www.cleardata.com/risk-visualization-prioritization/). The initial Log4j alert was only the start; vulnerabilities continued to be identified after the initial alert and continue today. Those clients and their workloads are protected by ClearDATA using our intelligence-driven incident response approach to security. A summary of the first two weeks of Log4j: | **Date** | **Findings** | | --- | --- | | Dec 10, 2021 | ClearDATA became aware of a new critical zero-day vulnerability impacting multiple versions of the widely utilized Apache Log4j 2 logging library. This specific vulnerability has been assigned CVE-2021-44228 and is also commonly being referred to as “Log4Shell”.  The public disclosure revealed that, if exploited, the Log4j2 vulnerability could result in Remote Code Execution (RCE) on affected installations. Since becoming aware of this vulnerability ClearDATA has been diligently working with our security partners to ensure that all customer [environments](https://www.cleardata.com/cleardata-managed-services-regulated-environments/) are protected from exploitation. | | Dec 15, 2021 | ClearDATA became aware of a new vulnerability, CVE-2021-45046, in Apache Log4j that bypasses the security issues fixed in Log4j version 2.15. This vulnerability allows attackers to craft malicious input data using jndi lookup patterns, causing a denial of service (DOS). | | Dec 21, 2021 | ClearDATA became aware of a new vulnerability, CVE-2021-45105, in Apache Log4j that bypasses the security issues fixed in Log4j version 2.16. This allows an attacker with control over Thread Context Map data to cause a denial of service (DOS) when a crafted string causes a recursive lookup. | Between December 2021 and January 2022, ClearDATA defended over 3.9 million attacks with an 110x increase in attack frequency. ## Active Defense: The ClearDATA difference Active Defense is the result of ClearDATA incorporating insights and lessons learned from each incident into its processes. Unlike other vendors who only eradicate a single issue and move on, ClearDATA converts the information to intelligence and incorporates the intelligence into operations. Integrated into the ClearDATA Policy-as-Code engine, new insights – whether an indicator or a technical bit of information – are fed back into the security systems to make them stronger. ![](https://cspm.cleardata.com/hs-fs/hubfs/Imported_Blog_Media/attack-stats-graphic-2.png?width=1000&height=353&name=attack-stats-graphic-2.png) ## Detection: The Power of Reactive + Predictive ClearDATA’s Active Defense model focuses on denial and disruption of attacker tempo that minimizes the long-term viability of L4j vulnerabilities and attacker assets. ClearDATA predictive investigations accounted for 90.3% of all recorded LJ4 block events, while vendor-provided rules accounted for the remaining 9.7% of all Log4j blocked events. ## ClearDATA’s Managed Defense Never Rests ClearDATA has seen over a 100% increase in threats since mid-December 2021.  While Log4j remains a threat as hackers continue to target unpatched systems, geo tensions are escalating. Healthcare organizations are bracing for targeting by cybercrime groups with ties to Russia.  Evolving intelligence indicates that the [Russian Government is actively exploring options for potential cyberattacks](https://www.cisa.gov/uscert/russia). ClearDATA is ready to support healthcare organizations and applications —large and small—to be prepared to respond to disruptive cyber incidents. If you would like to learn more about how ClearDATA Managed Defense protects healthcare organizations from [cyberthreats](https://www.cleardata.com/security-threat-protection/) and improves the security of hundreds of [customers](https://www.cleardata.com/cloud-case-studies/), speak with a healthcare CyberHealth™ expert today. (C) 2022 ClearDATA Secure Your Healthcare Cloud ## Speak with a healthcare cybersecurity and compliance expert today. [Speak with an expert](https://www.cleardata.com/consultation/) ### [![ClearDATA Receives ATO on AWS Designation](https://cspm.cleardata.com/hubfs/Imported_Blog_Media/Screen-Shot-2019-12-03-at-10_06_41-AM-2.png) ClearDATA Receives ATO on AWS Designation](https://cspm.cleardata.com/cleardata-blog/blog/cleardata-receives-ato-on-aws-designation) ### [![Security Operations Center (SOC) – The Playbook for Healthcare IT ](https://cspm.cleardata.com/hubfs/Imported_Blog_Media/shutterstock_2436886775.jpg) Blog Security Operations Center (SOC) – The Playbook for Healthcare IT ](https://cspm.cleardata.com/cleardata-blog/blog/security-operations-center-soc-the-playbook-for-healthcare-it) ### [Your Adopted Cloud: How to Address Fears from Internal Teams about Privacy, Security, and Compliance](https://cspm.cleardata.com/cleardata-blog/blog/your-adopted-cloud) [![Clear data](https://cspm.cleardata.com/hubfs/Cleardata_February2025/images/cleardata-logo.svg "Clear data")](https://www.cleardata.com/) - [CSPM for Healthcare](https://www.cleardata.com/cspm) - [Safeguards: HIPAA, HITRUST, GDPR, ISO, NIST, PCI](https://www.cleardata.com/cspm/#cspm-features) - [Automated Compliance](https://www.cleardata.com/cspm/#cspm-features) - [Cloud Risk Identification & Remediation](https://www.cleardata.com/cspm/#cspm-features) - [Compliance Risk Scores](https://www.cleardata.com/cspm/#cspm-features) - [PHI Leak Discovery](https://www.cleardata.com/cspm/#cspm-features) - [Audit-Ready Reporting](https://www.cleardata.com/cspm/#cspm-features) - Services - Managed Services - [Cloud Compliance](https://www.cleardata.com/cloud-compliance/) - [Managed Detection & Response](https://www.cleardata.com/cspm/managed-detection-and-response/) - [Cloud Operations](https://www.cleardata.com/cspm/cloud-operations/) - [Professional Services](https://www.cleardata.com/cspm/cloud-transformation/) - [Cloud Migration & Modernization](https://www.cleardata.com/cspm/cloud-transformation/#migration) - [Cloud Assessments](https://www.cleardata.com/cspm/cloud-transformation/#assessments) - [End-To-End Cloud Resilience](https://www.cleardata.com/cspm/cloud-transformation/#end2end) - Solutions - By Market - [Healthcare Software & Services](https://www.cleardata.com/solutions-by-market/healthcare-software-services/) - [Medical Devices & Equipment](https://www.cleardata.com/solutions-by-market/medical-devices-equipment/) - [Healthcare Providers](https://www.cleardata.com/solutions-by-market/healthcare-providers/) - [Healthcare Payers](https://www.cleardata.com/solutions-by-market/healthcare-payers/) - By Topic - [Risk Visualization & Prioritization](https://www.cleardata.com/risk-visualization-prioritization/) - [Threat Detection & Protection](https://www.cleardata.com/security-threat-protection/) - [Cost & Performance Optimization](https://www.cleardata.com/cost-performance-optimization/) - [Healthcare Cloud Compliance](https://www.cleardata.com/healthcare-cloud-compliance/) - [Analytics & Reporting](https://www.cleardata.com/analytics-reporting/) - [GxP For Life Sciences](https://www.cleardata.com/gxp-life-sciences/) - [EHR Deployments In The Cloud](https://www.cleardata.com/ehr-cloud-deployments/) - Resources - [View All](https://www.cleardata.com/resources) - [Blog](https://www.cleardata.com/blog/) - [What Is Compliance Debt?](https://www.cleardata.com/blog/eliminating-compliance-debt-the-key-to-healthcare-tech-innovation/) - [Events](https://www.cleardata.com/events/) - [Customer Stories](https://www.cleardata.com/cloud-case-studies/) - About - [Leadership Team](https://www.cleardata.com/about-us/leadership-team/) - [Careers](https://www.cleardata.com/about-us/careers/) - [News](https://www.cleardata.com/about-us/news/) - [Cloud Partners](https://www.cleardata.com/supported-clouds) - [Microsoft Azure](https://www.cleardata.com/cspm/microsoft-azure/) - [Amazon Web Services (AWS)](https://www.cleardata.com/cspm/aws/) - [Google Cloud Platform](https://www.cleardata.com/cspm/google-cloud/) © 2026 CLEARDATA All rights reserved - [Privacy Policy](https://www.cleardata.com/legal/privacy-policy) - [Notice of Copyright Infringement](https://www.cleardata.com/legal/notice-of-copyright-infringement) - [Acceptable Use Policy](https://www.cleardata.com/legal/acceptable-use-policy/) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "ClearDATA", "url" : "https://cspm.cleardata.com/cleardata-blog/author/cleardata" }, "dateModified" : "2025-09-18T21:10:27.454Z", "datePublished" : "2022-05-09T09:06:43.000Z", "headline" : "Healthcare Needs Active Defense - ClearDATA", "mainEntityOfPage" : { "@id" : "https://cspm.cleardata.com/cleardata-blog/blog/healthcare-needs-active-defense", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://cspm.cleardata.com/hubfs/ClearDATA-logo-1540.png" } } } ```