Senators Tackle Cyber Threats to Safeguard 988 Crisis Lifeline

Senators Tackle Cyber Threats to Safeguard 988 Crisis Lifeline

Summary

• U.S. Senators Alex Padilla and Markwayne Mullin introduced a bipartisan cybersecurity bill.
• The bill aims to protect the 988 Suicide & Crisis Lifeline from cyberattacks.
• A December 2022 cyberattack on a Lifeline vendor knocked the service out for hours.
• Mental health advocates back stronger security for the hotline.
• The bill adds reporting rules and closer coordination with federal security officials.

Introduction: Closing a Security Gap in a Crisis Hotline

Getting help in a mental health crisis is hard enough. The 988 Suicide & Crisis Lifeline was launched to make it easier, with a three-digit number anyone can remember. A cyberattack could take that service down when people need it most. Senators Alex Padilla and Markwayne Mullin have introduced a bill meant to make that less likely.

Why the 988 Lifeline Matters

The 988 number replaced the older 10-digit National Suicide Prevention Lifeline number in July 2022 and now handles millions of calls, texts and chats. It routes people to a network of local crisis centers. Any outage cuts off help for people in danger.

A Real Outage

This is not a hypothetical. On December 1, 2022, a cyberattack on Intrado, a company that provides network services for the Lifeline, caused a nationwide outage that lasted several hours. Calls did not go through. Health care systems keep getting hit by attacks, and the 988 network is part of that sector.

What the Bill Does

The 988 Lifeline Cybersecurity Responsibility Act would require the Department of Health and Human Services to take steps to protect the Lifeline from cyberattacks and to eliminate known vulnerabilities. It does that through closer coordination with the HHS Chief Information Security Officer.

Reporting and Oversight

The bill would require the Lifeline’s network administrator to report cybersecurity vulnerabilities and incidents to the federal government, and crisis centers to report them to the administrator. It also directs the Government Accountability Office to study the system’s cybersecurity risks and weak points.

What Comes Next

The bill has drawn support from mental health advocates and lawmakers in both parties. If it works, it could serve as a model for protecting other emergency services, such as 911 systems, from similar attacks.

Senator Padilla has framed the bill as protecting people at their most vulnerable moment.

Senator Mullin, a Republican, joined as the lead cosponsor, which gives the bill a bipartisan footing.

The Stakes for Crisis Services

Cyber threats to services like the 988 Lifeline are serious. Someone in crisis cannot wait for a vendor to restore its network. The bill would not stop every attack, but it would put clearer duties on the people who run the system and give Congress a better view of the risks. It is a narrow fix for a real problem.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.