9–8–8 Lifeline Cybersecurity Responsibility Act

S. 1007 would amend federal law to protect the 988 Suicide and Crisis Lifeline from cybersecurity threats and attacks. The bill responds to a 2022 cyberattack that caused the lifeline to go offline, leaving people in crisis unable to reach mental health support. If enacted, the legislation would require the lifeline's network administrator to report any identified cybersecurity vulnerabilities and incidents to federal health officials within 24 hours of discovery. The bill would also increase coordination between the lifeline and the Chief Information Security Officer at the U.S. Department of Health and Human Services to prevent attacks and eliminate known vulnerabilities. Additionally, the Government Accountability Office would be required to conduct a study evaluating cybersecurity risks and vulnerabilities in the 988 system and report findings to Congress. The bill is currently under consideration in the Senate Health, Education, Labor, and Pensions Committee.