Severe Cyber Threats Ramp Up in Healthcare
Healthcare organisations are grappling with the growing menace of cyberattacks - and it’s those via the supply chain that wreak the most havoc.
Cyberattackers target healthcare providers for several reasons. Medical records contain comprehensive personal data useful for identity theft, insurance fraud and blackmail. As a result, health information can have a higher black market value than credit card details. On top of that, many healthcare systems have outdated security measures due to budget constraints and legacy technology and healthcare providers are more likely to pay ransoms quickly, to restore systems and prevent patient harm.
A fresh study by Proofpoint and Ponemon Institute shows that 92% of US healthcare entities have suffered a cyberattack within the last year, with supply chain assaults posing the largest threat to patient care.
These incidents occur when hackers target third-party suppliers, causing major disruptions in the delivery of crucial healthcare services or equipment. The effects are devastating due to the broad impact these breaches have across the entire sector.
From the affected organisations, an alarming 82% have experienced significant disruptions to patient care, a notable increase from 77% reported previously.
Such interruptions result in delayed medical procedures, unattended diagnostic tests and often a deterioration in patient health outcomes.
Direct impact on patient healthcare
The consequences of these supply chain attacks are direct and often critical for patients.
Delays in getting necessary medical supplies or diagnostics can be the difference between recovery and severe health complications.
In some dire instances, the delays have been linked to increased mortality rates. A concerning 28% of attacked healthcare facilities reported a rise in patient deaths, a 5% increase from prior figures.
This distressing trend underlines the urgent need for enhanced security measures within healthcare, especially around securing supply chains effectively.
While other attacks such as cloud breaches, ransomware and business email compromise are prevalent, none have as direct or severe an impact on patient care as those via the supply chain.
Once a supplier is compromised, it can lead to loss of access to essential healthcare services and products, hindering the capability to provide timely and potentially life-saving treatments.
"It is more important than ever for healthcare organisations to be aware of the threat to their security," shares Marc Haskelson, President and CEO of Compliancy Group. "Being prepared for a healthcare breach – by becoming HIPAA compliant and implementing robust cybersecurity practices – can mean all the difference in how your organisation copes with the aftermath of an incident."
Ransomware trends and a glimmer of hope
Though the battle with supply chain attacks continues, there is mildly encouraging news concerning ransomware threats.
Previously considered among the most perilous forms of cyberattacks, the impact of ransomware in the healthcare realm shows signs of decreasing. This year, only 54% of healthcare respondents felt vulnerable to ransomware, a decline from the previous 64%.
This trend could partly be attributed to ransomware groups steering clear of healthcare and other critical infrastructures, which often draw swift and significant law enforcement responses.
However, for those still impacted, the financial stakes are higher than ever, with the average ransom paid now topping US$1m, an increase of 10%.
As healthcare entities enhance their defences against ransomware, the enduring challenge remains with supply chain security.
Healthcare providers will continue to face significant risks until their suppliers and partners fortify their cybersecurity procedures, critical to safeguarding patient care.
******
Make sure you check out the latest industry news and insights at Healthcare Digital and also sign up to our global conference series - Tech & AI LIVE 2024
******
Healthcare Digital is a BizClik brand
