Cybersecurity: The Week in Review

Cybersecurity & Healthcare: A Week in Review

The past week has seen significant developments in the realm of cybersecurity, particularly within the healthcare sector. From increasing budgets to combat cyber threats to major arrests and new technological solutions, here’s a roundup of what’s been happening.

HIMSS Survey Results on Cybersecurity

According to a recent survey by the Healthcare Information and Management Systems Society (HIMSS), a majority of healthcare facility IT decision-makers are prioritizing cybersecurity. Here are the key takeaways:

• Budget Increases: 55% of IT decision-makers are increasing their cybersecurity budgets. Another 23% plan to maintain their current budget levels.
• Spending Allocation: On average, 7% of the IT budget is allocated to cybersecurity solutions and services.
• Talent Challenges: 74% of respondents report difficulties in attracting and retaining cybersecurity talent.

HP Reports on Cyberattack Origins

HP’s survey shed light on the common vectors for cyberattacks:

• Email Attachments: 53% of attacks originate from email attachments.
• Browser Downloads: 25% of attacks start with downloads from web browsers.
• USB Drives and File Sharing: 22% are initiated through USB thumb drives and file-sharing services.
• Document Threats: 65% of document-based threats rely on exploits to execute code.
• Email Gateway Evasion: 12% of email threats manage to bypass one or more email gateway scanners.

Major Hacker Arrest

In a significant law enforcement achievement, the U.S. Department of Justice announced the arrest of Yunhe Wang, a notorious hacker from China:

• Cybercrime Botnet: Wang is accused of operating the world’s largest cybercrime botnet.
• Financial Gain: He allegedly amassed up to $99 million through the resale of stolen identities.
• Infrastructure: The botnet was managed via 150 dedicated servers, with half leased from U.S.-based providers.
• Assets: Wang used his illicit gains to purchase 21 properties, some located in the U.S.

Ransomware Impact on Hospital Care

A survey published by the Journal of the American Medical Association (JAMA) highlighted the detrimental effects of ransomware attacks on hospital operations:

• Patient Visits: ER and inpatient visits dropped by 8% in the first week and by 16% in the second week post-attack.
• Sustained Impact: This drop in visits persisted for up to eight weeks, underscoring the long-term effects of such attacks.

EHR Contracts and Technological Solutions

Several key contracts and new technology solutions were announced:

• NextGen won a contract with Axis Health System in Colorado to provide EHR services.
• eClinicalWorks secured a contract with Atlantis Orthopedics in Florida for a cloud-based EHR solution.
• Softlinx launched a new AI-powered cloud fax solution aimed at improving patient intake and workflow processes in healthcare.
• Papercut partnered with etherFAX to enhance its Scan to Fax application with cloud fax capabilities.

Germany Contemplates Fax Machine Ban

In an intriguing development, National Public Radio News reported that Germany is considering banning fax machines. The Bundestag, Germany’s lower house of parliament, may vote by the end of June to prohibit fax usage in government operations.

HIPAA Compliance Concerns

A survey by Software Advice revealed worrying trends regarding HIPAA compliance:

• Lack of Plans: 37% of healthcare IT professionals reported not having a HIPAA security incident response plan.
• Cyberattack Incidence: 33% experienced at least one cyberattack in the last three years, with 42% facing ransomware attacks.
• Patient Impact: 48% of attacks impacted Protected Health Information (PHI), and 25% disrupted patient care.

Rising Cyber Insurance Claims

Coalition Insurance reported a significant increase in cyber insurance claims:

• Year-on-Year Increase: There was a 13% increase in cyber insurance claims.
• Cost of Claims: The average claim amount rose by 10%, with losses averaging just over $100,000.
• Ransomware Claims: Ransomware claims saw a 19% increase.

Cybersecurity in healthcare continues to evolve rapidly, with increasing budgets, significant threats, and new technological solutions shaping the industry. Staying ahead of these developments is crucial for healthcare providers to safeguard patient data and ensure uninterrupted care.