Managing Cyber Attacks in the Health Care Industry

The health care industry is more susceptible to cyber attacks than any other industry today.

Digital healthcare icons over a person’s face on code background, illustrating cyber risk in the health care industry
Key Takeaways
  • Healthcare organizations experience significantly higher rates of data theft, security incidents, advanced malware, and phishing compared to other industries.
  • A large majority of healthcare executives report their organizations have been impacted by malware, botnets, and cyber attacks within the past two years.
  • Key threat vectors in healthcare include external hackers, third-party data sharing, insider breaches or theft, wireless computing, and inadequate firewalls.
  • Rapid adoption of electronic health record (EHR) systems without mature security practices has increased the attack surface and risk exposure for healthcare providers.
  • Board-level attention to security has grown following high-profile breaches, driving a shift toward proactive, organization-wide cyber defense strategies.
  • Leveraging DNS infrastructure, including implementing a DNS firewall, can provide an effective additional security layer for early threat detection and blocking malicious traffic before it reaches critical systems.

The health care industry is more susceptible to cyber attacks than any other industry today. Recent research by Raytheon/Websense found some startling trends. Compared to other industries, healthcare is:

  • 200% more likely to encounter data theft
  • 340% more likely to be the target of security incidents and attacks
  • 400% more likely to be impacted by advanced malware
  • 74% more likely to be impacted by phishing schemes[1]

KPMG found that 81% of health care executives reported that their organizations were hit by malware, botnets, and cyber attacks at least once in the past two years[2]. The most common threats to healthcare include:

  • External hackers (65%)
  • Sharing data with third-parties (48%)
  • Employee breaches/theft (35%)
  • Wireless computing (35%)
  • Inadequate firewall (27%)2

This doesn’t come as a surprise. Considering that electronic health care record (EHR) systems have only recently been implemented, organizations don’t necessarily have the proper data protection best practices in place. Combine that with high-value health care data, this industry is a breeding ground for cybercriminals.

“After seeing their peers and competitors breached, health care organizations understand that now is the time to take steps to defend their organizations from top to bottom.”

Recent media coverage of high-profile incidents has encouraged discussions of enterprise security amongst board members. As one analyst remarks, “After seeing their peers and competitors breached, health care organizations understand that now is the time to take steps to defend their organizations from top to bottom.”[3] As a result, health care organizations need to come up with security measures – early threat detection, user education, and breach responses3 – from the get-go, rather than dealing with the aftermath of cyber attacks.

Leveraging your DNS infrastructure is a good place for additional layers of protection. DNS is the starting point for connectivity and is used by all devices to connect to sites and applications. Creating a DNS firewall can help block malicious activities before they reach critical applications and services.

Read the full article: Health Care Industry Susceptible to Cyber Attacks. [1] WEBSENSE® 2015 THREAT REPORT, Ratheon | Websense http://www.websense.com/content/2015-healthcare-industry-drilldown.aspx?cmpid=pr
[2] http://advisory.kpmg.us/content/dam/kpmg-advisory/PDFs/ManagementConsulting/2015/KPMG-2015-Cyber-Healthcare-Survey.pdf
[3] WEBSENSE® 2015 THREAT REPORT, Ratheon | Websense http://www.websense.com/content/2015-healthcare-industry-drilldown.aspx?cmpid=pr


Published in:


An avatar of the author

BlueCat provides core services and solutions that help our customers and their teams deliver change-ready networks. With BlueCat, organizations can build reliable, secure, and agile mission-critical networks that can support transformation initiatives such as cloud adoption and automation. BlueCat’s growing portfolio includes services and solutions for automated and unified DDI management, network security, multicloud management, and network observability and health.

Related content

Flock of geese flying in formation across a blue sky, framed by a pink graphic border, symbolizing coordinated network migrat

Automate your DDI modernization path by migrating with Micetro

Automate cross-platform DNS and DHCP migration with Micetro to reduce risk, eliminate manual effort, and modernize infrastructure faster.

Read more
Three armored figures walking toward a futuristic Las Vegas skyline with pyramids, glowing orb, and "Welcome to Fabulous Las

Your journey to intelligent NetOps begins at Cisco Live

Visit BlueCat’s booth or book a meeting now to learn more about how our solutions can help you build a network that supports constant change.

Read more
Stacked colorful wooden directional arrows on a post by a calm seaside with distant hills and blue sky

Replace BIND and ISC with Micetro DNS/DHCP Server (MDDS)

Tired of patching and manually configuring BIND DNS and ISC DHCP? Discover how Micetro MDDS appliances can replace them for modern DDI.

Read more
Row of orange industrial robotic arms positioned along an automated conveyor belt in a factory setting

Automate it all in Integrity with REST v2 API-first DDI management

Discover API-first DDI with Integrity X by using REST v2 to automate DNS, DHCP, and IPAM for scalable, secure network operations.

Read more