Navigating Cybersecurity Challenges in Healthcare

Healthcare cybersecurity challenges continue to escalate. Healthcare is a prime target for cybercriminals, as healthcare organizations often house sensitive and personal data, and the already complex space received even more threats in the wake of the pandemic and telehealth expansion.

So, how exactly can healthcare entities best manage security concerns? It’s not an easy answer, but one that requires a multi-pronged approach.

Is Your Healthcare Organization Meeting Cybersecurity Standards?

The first part of having a robust cybersecurity plan is meeting standards, specifically the NIST CSF (National Institute of Standards Cybersecurity Framework). The framework was developed in 2014 and stands as the gold standard for proactive cybersecurity initiatives.

While the framework covers every aspect of security, it’s not always easy for organizations to implement. A report from a cybersecurity consulting firm confirmed this assumption, finding that only 44% of hospital and health systems were in conformance to NIST CSF protocols. The report comes to this conclusion after an analysis of over 300 assessments from 2019.

The study detailed failings in four of the five core functions of NIST—identify, protect, respond and recover. Only detect remained flat.

What does this mean for healthcare cybersecurity? It illustrates a lag in establishing and executing comprehensive security measures. If healthcare organizations don’t improve, they put themselves at great risk, because hackers will continue to use more sophisticated practices to initiate breaches or plant malware.

Navigating Cybersecurity Challenges in Healthcare Internal-01

New Threats Arise in the Pandemic

The impact of COVID-19 permeates healthcare in every imaginable way, including spurring an increase in cybersecurity threats. A report from INTERPOL highlights that COVID-19 related phishing attacks are creating concerns. Cybercriminals are also using ransomware and DDoS (distributed denial of service) to impact healthcare infrastructure.

The uptick in ransomware may directly correlate to healthcare entities having to deploy remote systems quickly and an increase in telehealth services. These technology platforms are essential to keep the healthcare ecosystem working and ensure patient care; however, they are also new endpoints for access from cybercriminals.

What’s on the Horizon: New Concerns for Healthcare Cybersecurity

In the August 2020 Healthcare Data Breach Report, the number of breaches in August was less than the peak in June with 37 reported cases. However, August does represent the highest number of compromised records, with 2,167,179. The most prevalent cause was hacking, with the network server being the top location.

These data points seem to align with the shortcomings of healthcare on the NIST CSF. Beyond just the constant rise of breaches and the need for healthcare organizations to bolster their strategies, there are more trends every stakeholder in the sector should have on their radar.

Connected medical devices

These IoT (Internet of Things) devices are becoming extremely critical for managing chronic diseases and providing innovative new ways for care, but they also represent a risk.

Vulnerabilities exist, and not just in as a means for someone to infiltrate a network. They could also change the device itself, which is a patient safety issue. Healthcare systems need to work in concert with the manufacturers of products to ensure they remain secure.

The resurgence of ransomware

Ransomware is becoming the single biggest threat to healthcare cybersecurity. A recent attack left a large healthcare system’s network shutdown, impacting 250 hospitals.

In response, the HHS (Health and Human Services) Cybersecurity Program issued an update relating to the Ryuk ransomware. HHS provides a history of Ryuk and how to mitigate it, including cybersecurity awareness training for employees around phishing, implementation of Intrusion Detection Systems (IDS), blocking suspicious IP addresses, and other best practices.

Patient access portals

With the new interoperability rule finalized in March, patient access is a key provision. Payers and providers will have to provide patients a portal to access their medical records. While HHS has deferred the enforcement of these rules due to COVID-19, it’s still something that healthcare entities must be planning for, and that should include security protocols.

Navigating Cybersecurity Challenges in Healthcare Internal-02

Interoperability has long been the Achilles heel in healthcare digitization standardization; thus, security weaknesses will still be prevalent.

Mergers, acquisitions, and closures

In the past two years, the proliferation of mergers, acquisitions, and closures of hospitals has risen. Bankruptcy is a leading cause of closure or acquisition. With uncertainty during a public health crisis, many organizations are vulnerable.

If hospitals close or are acquired, patient data must be exchanged, converted or shared. These represent opportunities for hackers and should be top of mind for those impacted.

Telehealth expansion

Telehealth has finally become mainstream. It’s been a lifeline for patients and providers during the pandemic, with Medicare even allowing for greater coverage. While it’s enabling continuity of care, it does pose new cybersecurity challenges.

Healthcare organizations need to be vigilant about the platforms they choose, how they are used, and the networks where they sit. Organizations might consider practices like penetration testing to check the stability of the system.

Preparing Your Organization to Overcome Cybersecurity Hurdles

Healthcare cybersecurity is complicated and involves lots of people, processes and technology. Working to align with NIST CSF is certainly a great direction. Additionally, you should be monitoring trends and developing new, proactive ways to keep data safe.

In healthcare, protecting key data leads to more time spent ensuring positive outcomes, dollars saved that can be used elsewhere, confidence in the healthcare industry and in specific hospitals and systems, and more.

Telehealth, interoperability and other leading-edge solutions and best practices have the potential to revolutionize healthcare, and securing those capabilities will allow the industry to forge the best path forward.

One of the best ways to protect data is using an EHR that has a security certification from the Office of the National Coordinator for Health Information Technology (ONC). ChartLogic is proud to hold this certification, demonstrating the company’s commitment to security and compliance.

Learn more about the ChartLogic EHR today.

For the latest news, videos, and podcasts in the Healthcare Industry, be sure to subscribe to our industry publication.

Follow us on social media for the latest updates in B2B!

Twitter – @MarketScale
Facebook – facebook.com/marketscale
LinkedIn – linkedin.com/company/marketscale

Follow us on social media for the latest updates in B2B!

Image

Latest

AMAG Technology
AMAG Technology: Control, Reliability, and Customer-First Supply Chain Excellence
April 2, 2025

At AMAG Technology, being customer-obsessed goes beyond a mindset—it’s built into every part of the operation. One of the company’s greatest strengths lies in its ability to manufacture its own products, offering a level of supply chain control that few competitors can match. Allan Price, Head of Global Supply Chain at AMAG, emphasizes how this…

Read More
visitor management solution
Reinventing Visitor Management Solution with Symmetry GUEST
April 2, 2025

In an age where speed and security are paramount, the traditional paper logbook is becoming a relic of the past. AMAG Technology’s Symmetry Guest system offers a modern, digital solution that redefines the way organizations welcome and manage visitors. Gone are the days of long lines and confusion at the front desk—Symmetry Guest empowers hosts…

Read More
AMAG
Driven by Customers, Defined by Innovation: Inside AMAG’s Customer-Obsessed Approach
April 2, 2025

AMAG Technology continues to strengthen its customer-obsessed culture by actively listening to both internal and external voices. As shared by Kyle Gordon, Executive Vice President of Global Sales, Marketing, & Commercial Excellence, the company is focused on improving processes, responding with speed, and driving innovation—while honoring its legacy and delivering unique value within the industry.

Read More
biotech
Biotech Moves Smarter: IDDI Powers Data-Driven Drug Innovation
April 2, 2025

As biotech innovation accelerates, small and mid-size pharmaceutical companies are becoming key players in bringing new treatments to market. Yet many of these organizations face steep challenges when navigating clinical trial design, regulatory approval, and data integrity. According to a McKinsey Global Institute report, industries like biotech could help generate up to $50 trillion…

Read More