Hospital Hackings Surge, Putting Patient Data and Safety at Risk
The same technology that makes it convenient for patients to request prescription refills, view test results and schedule appointments with physicians has also made it easier for hackers to launch crippling cyberattacks on hospitals and healthcare systems, and analysts say there’s no end in sight.
“These cyberattacks on our hospital infrastructures here and abroad only highlight the very urgent need for improved cybersecurity in healthcare overall,” asserted Steven McKeon, cybersecurity expert and founder of MacguyverTech.
In 2023, the healthcare and public health sector was the most targeted in the United States by ransomware attackers, according to a new FBI report, far surpassing other critical services like transportation and energy.
According to analysts, cybercriminals launch these very intricate and damaging ransomware attacks to lock up critical computer systems and steal data as a means of extortion.
Why is healthcare such an easy target? One reason might be its aging technology.
“Our company’s experience and its increasing demand to fix outdated technology that is in some cases more than a decade old is quite alarming,” McKeon continued. “With 1 in 3 Americans impacted by data breaches, modernizing these systems and enhancing cybersecurity measures are essential in protecting patient data and ensuring safety and continuity of care.”
But the healthcare system needs help, McKeon explains, in the form of increased federal funding and enforcement of required cybersecurity practices and enhancements.
“Collaborative efforts between governments and the healthcare industries are vital to tackling these threats and securing these systems for the long haul,” McKeon concludes.
Why 2 in 3 SMBs Can’t Afford to Skip Cybersecurity Monitoring
Businesses are facing a surge in cyber threats. With global cybercrime costs projected to reach $13.82 trillion by 2028, the need for cybersecurity measures has never been more critical. At the forefront of this defense is cybersecurity monitoring — a continuous process of analyzing network traffic and system activity to detect and respond to security incidents.
“As businesses rely on digital infrastructure, the implementation of effective cybersecurity monitoring strategies can save them a lot of trouble,” says Andrius Buinovskis, head of product at NordLayer. “The role of cybersecurity monitoring is to safeguard business assets, maintain compliance, and mitigate the potentially devastating impacts of cyberattacks.”
Recent studies have shown the projected global cost of cybercrime is set to reach $10.5 trillion by 2025. The risk of ignoring cybersecurity monitoring is further emphasized by research revealing that the average cost of a data breach rose to $4.45 million in 2023, which accounts for a company’s direct financial losses, costs associated with recovery, legal proceedings, and reputational damage.
The threat landscape affects businesses of all sizes, with a survey indicating that 66% of small and medium-sized businesses have experienced a cyberattack in the past 12 months. This statistic highlights that no organization, regardless of its scale, is immune to cyber threats.
Perhaps most concerning for businesses is the impact on customer trust. A recent study found that 55% of Americans would cease doing business with a company that experienced a data breach, underscoring the long-term reputational and financial consequences of inadequate cybersecurity measures.
Buinovskis says that the journey to cybersecurity monitoring begins with a risk assessment. This first step involves identifying valuable assets, potential threats, and vulnerabilities within the network infrastructure. By understanding the specific risks an organization faces, businesses can prioritize their security efforts effectively.
“Following the risk assessment, selecting the right tools for security monitoring is important. These tools should align with the organization’s unique needs and provide real-time alerts and analysis,” says Buinovskis. “Effective monitoring solutions should be capable of detecting and responding to security incidents promptly, offering both threat identification and incident-response capabilities.”
Buinovskis adds that establishing baselines for normal network activity and implementing continuous monitoring form the core of an effective cybersecurity strategy. By understanding typical network behavior and observing traffic and system activity in real time, businesses can identify anomalies, detect potential security incidents, and respond promptly.
“It’s essential to regularly review and update the cybersecurity monitoring strategy. As cyber threats evolve, so too must the defenses against them,” says Buinovskis. “Additionally, ongoing employee training is crucial to ensure that everyone in the organization is aware of the latest security threats and best practices.”
