Data breaches in the healthcare industry are expected to have affected 88 million American citizens in 2023.
According to new data released by the Department of Health and Human Services (HHS), cybercriminals have breached sensitive data of tens of millions of patients in the US this year.
Specifically, HHS said there was a 239% increase in “major breaches” reported to the Office for Civil Rights (OCR) over the past four years and a 278% increase in ransomware.
The same trends can be seen in 2023 alone. Major breaches have affected more than 88 million people, a 60% increase from last year. HHS said account accounted for 77% of these reported breaches.
OCR did not say how many breaches stemmed from ransomware incidents this year, though they will certainly be numerous.
See also: NoEscape ransomware: Targets healthcare organizations
“Ransomware attacks are increasingly common and target the healthcare system. This leaves hospitals and patients vulnerable to data and security breaches,” said OCR Director Melanie Fontes Rainer.
He added that the healthcare system must take steps to identify and address cybersecurity weaknesses ascyber threats increase and evolve.
A Sophos report published last week revealed that 60% of healthcare organizations (HCOs) surveyed suffered a ransomware in the past year. Victims’ data was successfully encrypted in 75% of these incidents.
Jan Lovmand, CTO of BullWall, argued that attacks in the sector have become a serious threat to health and safety.
“These attacks not only disrupt the delivery of essential medical services, postponing critical surgeries and treatments and putting patients’ lives at risk, but they also jeopardize the security of sensitive patient,” he added.
“Hospitals and healthcare organizations are particularly attractive targets for cybercriminals, and their reliance on technology to manage everything from patient records to surgical equipment makes them extremely vulnerable. This is exacerbated by their limited resources and investments in cybersecurity measures.“.
See also: BEC attacks in healthcare sector increased by 279%
Consequences of data breaches in the healthcare sector
The potential consequences of data breaches in the health sector and on individuals’ medical information can be serious and impact individuals’ privacy and security. When health information falls into the wrong hands, sensitive personal information, such as medical records, medical history and treatment information, can be disclosed. This can lead to a breach of privacy and put safety and well-being at risk.
Health data breaches can also lead to fraud and identity theft . Malicious users can use health information to mislead or steal individuals’ identities , causing financial loss and problems in their personal and family lives
Furthermore, data breaches can lead to health problems and poor quality of care. When health information falls into the wrong hands, there can be misuse of the information, misdiagnosis, incorrect treatment or delay in providing medical care. This can have serious consequences for the health and well-being of individuals.
See also: Hackers hold healthcare providers hostage
Finally, data breaches can cause a loss of trust in the system . When health information is not adequately protected, patients may become frustrated and question the healthcare system’s ability to protect their personal data. This can lead to a decrease in trust and make collaboration between patients and healthcare providers more difficult.
Source: www.infosecurity-magazine.com
