March 7, 2018 By Shane Schick 2 min read

The shift toward digital solutions for managing patient data may be contributing to the increasing volume of security breaches in healthcare, a recent report suggested.

According to the “2018 Thales Data Threat Report,” 70 percent of healthcare organizations around the world have experienced a data breach. The survey, which included responses from approximately 1,200 global security professionals, also found that 55 percent of healthcare companies feel either “extremely” or “very vulnerable” to cyberattacks.

Technology Adoption Drives Up Security Breaches in Healthcare

Like almost every other industry sector, healthcare organizations have been adopting new technologies to boost productivity, cut down costs, improve communication and solve problems. Infosecurity Magazine noted that 93 percent of firms in the Thales study said they are using analytics software to manage big data, hosting data in the cloud or leveraging the Internet of Things (IoT) in some way. Security breaches may be on the rise simply because there are more points of vulnerability for cybercriminals to target.

Medical records often include data that is more valuable that credit card information, ComputerWeekly reported. Although 70 percent of healthcare professionals who responded to the Thales survey said that adhering to regulation and compliance requirements is an “extremely” or “very” effective way to avoid security breaches, it’s obviously not keeping all electronic health records and personal health information safe.

Insider Threats on the Rise

Thales isn’t the only firm taking a closer look at this sector. Verizon’s “2018 Protected Health Information Data Breach Report (PHIDBR)” revealed that nearly 6 in 10 security breaches in healthcare stem from either malicious or negligent employees. Another study from consulting firm Accenture found that nearly a quarter of U.S. healthcare employees know of at least one co-worker who had illegally sold usernames, passwords or other private information to unauthorized outsiders.

While insider threats are common in many other markets, the Verizon report noted that 70 percent of security breaches in healthcare that involved malicious code were ransomware attacks. Ransomware campaigns frequently target unsuspecting users, suggesting a need for increased security awareness and employee education.

More from

FYSA – Adobe Cold Fusion Path Traversal Vulnerability

2 min read - Summary Adobe has released a security bulletin (APSB24-107) addressing an arbitrary file system read vulnerability in ColdFusion, a web application server. The vulnerability, identified as CVE-2024-53961, can be exploited to read arbitrary files on the system, potentially leading to unauthorized access and data exposure. Threat Topography Threat Type: Arbitrary File System Read Industries Impacted: Technology, Software, and Web Development Geolocation: Global Environment Impact: Web servers running ColdFusion 2021 and 2023 are vulnerable Overview X-Force Incident Command is monitoring the disclosure…

What does resilience in the cyber world look like in 2025 and beyond?

6 min read -  Back in 2021, we ran a series called “A Journey in Organizational Resilience.” These issues of this series remain applicable today and, in many cases, are more important than ever, given the rapid changes of the last few years. But the term "resilience" can be difficult to define, and when we define it, we may limit its scope, missing the big picture.In the age of generative artificial intelligence (gen AI), the prevalence of breach data from infostealers and the near-constant…

Airplane cybersecurity: Past, present, future

4 min read - With most aviation processes now digitized, airlines and the aviation industry as a whole must prioritize cybersecurity. If a cyber criminal launches an attack that affects a system involved in aviation — either an airline’s system or a third-party vendor — the entire process, from safety to passenger comfort, may be impacted.To improve security in the aviation industry, the FAA recently proposed new rules to tighten cybersecurity on airplanes. These rules would “protect the equipment, systems and networks of transport…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today