The recent ransomware attack on Change Healthcare, a subsidiary of UnitedHealth Group, has highlighted critical vulnerabilities within the healthcare sector. This incident disrupted the processing of insurance claims, causing significant distress for patients and providers alike. Pharmacies struggled to process prescriptions, and patients were forced to pay out-of-pocket for essential medications, underscoring the urgent need for robust cybersecurity measures in healthcare.
The urgency of strengthening cybersecurity is not limited to the United States. In India, the scale of cyber threats faced by healthcare institutions is even more pronounced. In 2023 alone, India witnessed an average of 2,138 cyber attacks per week on each organization, a 15% increase from the previous year, positioning it as the second most targeted nation in the Asia Pacific region. A notable incident that year involved a massive data breach at the Indian Council of Medical Research (ICMR), which exposed sensitive information of over 81.5 crore Indians, thereby highlighting the global nature of these threats.
This challenge is not one that funding alone can solve. It requires a comprehensive approach that fights fire with fire—or, in modern times, staves off AI attacks with AI security. Anything short of this leaves private institutions, and ultimately their patients, at risk of losing personal information, limiting access to healthcare, and destabilising the flow of necessary medication. Attackers have shown us that the healthcare sector must be considered critical infrastructure.
The Healthcare Sector: A Prime Target for Cyberattacks
Due to the sensitive nature of the data it handles, the healthcare industry has become a primary target for cybercriminals. Personal health information (PHI) is precious on the black market, making healthcare providers attractive targets for ransomware attacks—regardless of any moral ground they may claim to stand on regarding healthcare.
In 2020, at the beginning of the pandemic, hospitals were overrun with patients, and healthcare systems seemed to be in danger of collapsing under the strain. It was believed that healthcare would be a bridge too far at the time. Hacking groups DoppelPaymer and Maze stated they “[D]on’t target healthcare companies, local governments, or 911 services.” If those organisations accidentally became infected, the ransomware groups’ operators would supply a free decryptor.
Since AI technology has advanced and medical device security lags, the ease of attack and the potential reward for doing so have made healthcare institutions too tempting to ignore. The Office of Civil Rights (OCR) at Health and Human Services (HHS) is investigating the Change Healthcare attack to understand how it happened. The investigation will address whether Change Healthcare followed HIPAA rules. However, in past healthcare breaches, HIPAA compliance was often a non-factor. Breaches by both Chinese nationals and various ransomware gangs show that attackers are indifferent to HIPAA compliance.
To Know More, Read Full Article @ https://ai-techpark.com/cybersecurity-urgency-in-healthcare/
Related Articles -
AI-Powered Wearables in Healthcare sector
Top Five Best Data Visualization Tools
Trending Category - Threat Intelligence & Incident Response
