Ransomware in Hospitals: What Providers Will Inevitably Face When Attacked.

Abstract

The healthcare industry is the #1 industry targeted by attackers. It is imperative for organizations to reevaluate the way they approach cybersecurity, rather than resting on their laurels in what is currently seen as the "new normal" security mindset. Currently, the industry is responding to compromises on a reactive basis, much like the way in which the financial services industry simply replaces consumers' credit cards after a retail breach, such as the recent attacks on Target and Home Depot. This security mindset is predicated on a lack of enforcement, the absence of appropriate penalties, and a culture of risk mitigation. Due to this attitude of acceptance, patients are consistently at risk of having their personally identifiable information compromised. To reset how healthcare organizations think about cybersecurity, measures must be taken proactively to protect busi- nesses against impending attacks. Otherwise, breaches are likely to continue until stricter enforcements and penalties are put in place for healthcare compa- nies and stakeholders.