{"id":25236,"date":"2022-09-08T20:00:48","date_gmt":"2022-09-08T20:00:48","guid":{"rendered":"https:\/\/www.esecurityplanet.com\/?p=25236"},"modified":"2022-09-08T23:40:43","modified_gmt":"2022-09-08T23:40:43","slug":"healthcare-cyberattacks-increase-mortality","status":"publish","type":"post","link":"https:\/\/www.esecurityplanet.com\/trends\/healthcare-cyberattacks-increase-mortality\/","title":{"rendered":"Healthcare Cyberattacks Lead to Increased Mortality, Lower Patient Care: Ponemon Study"},"content":{"rendered":"\n

Nearly a quarter of healthcare organizations hit by ransomware attacks<\/a> experienced an increase in patient mortality, according to a study from Ponemon Institute and Proofpoint released today.<\/p>\n\n\n\n

The report<\/a>, \u201cCyber Insecurity in Healthcare: The Cost and Impact on Patient Safety and Care,\u201d surveyed 641 healthcare IT and security practitioners and found that the most common consequences of cyberattacks are delayed procedures and tests, resulting in poor patient outcomes for 57% of the healthcare providers, followed by increased complications from medical procedures. The type of attack most likely to have a negative impact on patient care is ransomware, leading to procedure or test delays in 64% of the organizations and longer patient stays for 59% of them.<\/p>\n\n\n\n

The Ponemon report comes with a caveat that the numbers depend on the accuracy of self-reporting and thus don’t have the weight of, say, an epidemiological study that looks at hospital mortality baseline data before and after an attack, but the data is similar to what Ponemon found last year<\/a> and there have been a number of reports of patient deaths and other complications from ransomware attacks.<\/p>\n\n\n\n

Also read: After Springhill: Assessing the Impact of Ransomware Lawsuits<\/a><\/p>\n\n\n\n

Healthcare Cyberattacks Common \u2013 And Costly<\/h2>\n\n\n\n

The new report found that 89% of the surveyed organizations have experienced an average of 43 cyberattacks in the past 12 months. The most common types of attacks were cloud compromise, ransomware, supply chain<\/a>, and business email compromise (BEC)\/spoofing<\/a>\/phishing<\/a>.<\/p>\n\n\n\n

Ponemon chairman and founder Larry Ponemon said in a statement that “Most of the IT and security professionals regard their organizations as vulnerable to these attacks,” and that growing adoption of technologies such as cloud, mobile<\/a>, big data<\/a>, and the Internet of Things (IoT)<\/a> are adding to that risk.<\/p>\n\n\n\n

The Internet of Medical Things (IoMT) is a top concern for survey participants. Healthcare organizations have an average of more than 26,000 network-connected devices, yet only 51% of the surveyed organizations include them in their cybersecurity strategy.<\/p>\n\n\n\n

Healthcare organizations are better at cloud security<\/a>, with 63% taking steps to prepare for and respond to cloud compromise attacks, and 62% have taken steps to prevent and respond to ransomware \u2014 but that still leaves nearly 40% of healthcare organizations more vulnerable than they should be.<\/p>\n\n\n\n

Preparedness is even worse for supply chain attacks and BEC, with only 44% and 48% having a documented response<\/a> to those attacks, respectively.<\/p>\n\n\n\n

Healthcare cybersecurity tools likely have a high return on investment (ROI), even though roughly half of the survey respondents say they lack sufficient staffing and in-house expertise.<\/p>\n\n\n\n

The financial costs of healthcare cyberattacks are high, the report noted, costing an average of $4.4 million in the last 12 months, with productivity loss creating the most significant financial impact at $1.1 million.<\/p>\n\n\n\n

“Healthcare has traditionally fallen behind other sectors in addressing vulnerabilities … and this inaction has a direct negative impact on patients’ safety and wellbeing,” stated Ryan Witt, Proofpoint’s healthcare cybersecurity leader. “As long as cybersecurity remains a low priority, healthcare providers will continue to endanger their patients. To avoid devastating consequences, healthcare organizations must understand how cybersecurity affects their patient care and take the steps toward better preparedness that protects people and defends data.”<\/p>\n\n\n\n

\"\"
Ponemon: Effects of ransomware on patient care<\/figcaption><\/figure>\n\n\n\n
\"\"
Ponemon: Effects of four common cyberattacks on healthcare<\/figcaption><\/figure>\n\n\n\n

Further reading on ransomware protection and recovery<\/em>:<\/p>\n\n\n\n