Healthcare cybersecurity is in a state of transformation. As medical care becomes more networked and interconnected via computers and devices, the digital landscape of health administrators, hospitals, and patients, has become increasingly vulnerable.
The cybersecurity healthcare landscape has many facets. These include the information security networks of medical facilities and hospitals, medical equipment and devices, and protection of the privacy of patients. Technologies, processes and people are the cornerstones of the healthcare cybersecurity transformation.
The 2016 Sixth Annual Benchmark Study on Privacy & Security of Healthcare Data presented by Ponemon Institute, May 2016, revealed that a large number of healthcare organizations have experienced multiple data breaches resulting from evolving cyber threats. Hackers have already exploited medical facilities and hospitals – and the problem is escalating.
Earlier this year, Hollywood Presbyterian Medical Center was victimized by ransomware. For ten days the computer systems were unavailable because of the hackers and Hollywood Presbyterian ended up paying the hackers in cryptocurrencies to recover control of their systems. Another US hospital, Boston Children’s Hospital was the target of a series of breaches including distributed denial of service attacks. Medical institutions in Europe and Canada have also been subjected to intrusions.
The reality is that hospitals are a logical hacker target for several reasons. They are susceptible to phishing attacks and insider threats because of the large data flows throughout various systems. They are many points of vulnerability for malware/ransomware extortion because their systems are networked with multiple stations and devices. In addition, most workers in medical facilities are not trained in basic cybersecurity hygiene.
For hackers, healthcare facilities are viewed as achievable targets where they can reap quick monetary gains. Hackers can steal medical records that are commodities with a resale value on the Dark Web. And, the likelihood is pretty strong that hospital administrators will pay ransoms to gain back operational control over facilities to reduce liabilities and putting patients at risk. Hospitals and healthcare facilities also want to protect their reputations and prevent cybersecurity incidents from going public.