Navigating Cybersecurity Challenges in Healthcare

Healthcare cybersecurity challenges continue to escalate. Healthcare is a prime target for cybercriminals, as healthcare organizations often house sensitive and personal data, and the already complex space received even more threats in the wake of the pandemic and telehealth expansion.

So, how exactly can healthcare entities best manage security concerns? It’s not an easy answer, but one that requires a multi-pronged approach.

Is Your Healthcare Organization Meeting Cybersecurity Standards?

The first part of having a robust cybersecurity plan is meeting standards, specifically the NIST CSF (National Institute of Standards Cybersecurity Framework). The framework was developed in 2014 and stands as the gold standard for proactive cybersecurity initiatives.

While the framework covers every aspect of security, it’s not always easy for organizations to implement. A report from a cybersecurity consulting firm confirmed this assumption, finding that only 44% of hospital and health systems were in conformance to NIST CSF protocols. The report comes to this conclusion after an analysis of over 300 assessments from 2019.

The study detailed failings in four of the five core functions of NIST—identify, protect, respond and recover. Only detect remained flat.

What does this mean for healthcare cybersecurity? It illustrates a lag in establishing and executing comprehensive security measures. If healthcare organizations don’t improve, they put themselves at great risk, because hackers will continue to use more sophisticated practices to initiate breaches or plant malware.

Navigating Cybersecurity Challenges in Healthcare Internal-01

New Threats Arise in the Pandemic

The impact of COVID-19 permeates healthcare in every imaginable way, including spurring an increase in cybersecurity threats. A report from INTERPOL highlights that COVID-19 related phishing attacks are creating concerns. Cybercriminals are also using ransomware and DDoS (distributed denial of service) to impact healthcare infrastructure.

The uptick in ransomware may directly correlate to healthcare entities having to deploy remote systems quickly and an increase in telehealth services. These technology platforms are essential to keep the healthcare ecosystem working and ensure patient care; however, they are also new endpoints for access from cybercriminals.

What’s on the Horizon: New Concerns for Healthcare Cybersecurity

In the August 2020 Healthcare Data Breach Report, the number of breaches in August was less than the peak in June with 37 reported cases. However, August does represent the highest number of compromised records, with 2,167,179. The most prevalent cause was hacking, with the network server being the top location.

These data points seem to align with the shortcomings of healthcare on the NIST CSF. Beyond just the constant rise of breaches and the need for healthcare organizations to bolster their strategies, there are more trends every stakeholder in the sector should have on their radar.

Connected medical devices

These IoT (Internet of Things) devices are becoming extremely critical for managing chronic diseases and providing innovative new ways for care, but they also represent a risk.

Vulnerabilities exist, and not just in as a means for someone to infiltrate a network. They could also change the device itself, which is a patient safety issue. Healthcare systems need to work in concert with the manufacturers of products to ensure they remain secure.

The resurgence of ransomware

Ransomware is becoming the single biggest threat to healthcare cybersecurity. A recent attack left a large healthcare system’s network shutdown, impacting 250 hospitals.

In response, the HHS (Health and Human Services) Cybersecurity Program issued an update relating to the Ryuk ransomware. HHS provides a history of Ryuk and how to mitigate it, including cybersecurity awareness training for employees around phishing, implementation of Intrusion Detection Systems (IDS), blocking suspicious IP addresses, and other best practices.

Patient access portals

With the new interoperability rule finalized in March, patient access is a key provision. Payers and providers will have to provide patients a portal to access their medical records. While HHS has deferred the enforcement of these rules due to COVID-19, it’s still something that healthcare entities must be planning for, and that should include security protocols.

Navigating Cybersecurity Challenges in Healthcare Internal-02

Interoperability has long been the Achilles heel in healthcare digitization standardization; thus, security weaknesses will still be prevalent.

Mergers, acquisitions, and closures

In the past two years, the proliferation of mergers, acquisitions, and closures of hospitals has risen. Bankruptcy is a leading cause of closure or acquisition. With uncertainty during a public health crisis, many organizations are vulnerable.

If hospitals close or are acquired, patient data must be exchanged, converted or shared. These represent opportunities for hackers and should be top of mind for those impacted.

Telehealth expansion

Telehealth has finally become mainstream. It’s been a lifeline for patients and providers during the pandemic, with Medicare even allowing for greater coverage. While it’s enabling continuity of care, it does pose new cybersecurity challenges.

Healthcare organizations need to be vigilant about the platforms they choose, how they are used, and the networks where they sit. Organizations might consider practices like penetration testing to check the stability of the system.

Preparing Your Organization to Overcome Cybersecurity Hurdles

Healthcare cybersecurity is complicated and involves lots of people, processes and technology. Working to align with NIST CSF is certainly a great direction. Additionally, you should be monitoring trends and developing new, proactive ways to keep data safe.

In healthcare, protecting key data leads to more time spent ensuring positive outcomes, dollars saved that can be used elsewhere, confidence in the healthcare industry and in specific hospitals and systems, and more.

Telehealth, interoperability and other leading-edge solutions and best practices have the potential to revolutionize healthcare, and securing those capabilities will allow the industry to forge the best path forward.

One of the best ways to protect data is using an EHR that has a security certification from the Office of the National Coordinator for Health Information Technology (ONC). ChartLogic is proud to hold this certification, demonstrating the company’s commitment to security and compliance.

Learn more about the ChartLogic EHR today.

For the latest news, videos, and podcasts in the Healthcare Industry, be sure to subscribe to our industry publication.

Follow us on social media for the latest updates in B2B!

Twitter – @MarketScale
Facebook – facebook.com/marketscale
LinkedIn – linkedin.com/company/marketscale

Follow us on social media for the latest updates in B2B!

Image

Latest

What It Takes to Restore a Tornado-Damaged Clinic
What It Takes to Restore a Tornado-Damaged Clinic
August 21, 2025

When a tornado tore through Oklahoma City in April, BMS CAT was already on-site before many businesses even realized the extent of the tornado damage—including Valor Physical Therapy. Thanks to an existing relationship with Valor’s affiliated hospital, the BMS CAT team was positioned to respond quickly. “We were actually on scene before they knew…

Read More
Burl Stamp
Improving Employee Engagement Through CAREmunication — A Conversation with Burl Stamp
August 21, 2025

With the healthcare landscape seeing many evolving changes, employee engagement is no longer just a buzzword — it’s now a business imperative. Amid rising turnover and persistent staffing shortages, organizations are under pressure to build resilient, engaged teams. According to Gallup, 70% of the variance in team engagement is tied to one factor: the…

Read More
precision machining
Pharma Manufacturing: Meeting Annex I with Precision Machining for Safer Sterile Drug Production
August 21, 2025

Pharmaceutical manufacturers are under increasing pressure to deliver sterile, high-quality medicines in smaller batches and faster cycles. As pharma manufacturing evolves, regulatory demands have intensified, especially following the 2023 revision of EU GMP Annex I, which places new emphasis on contamination control strategies, improved traceability, and minimizing human intervention throughout production. According to American…

Read More
peer guidance
Leaders Who’ve Been There: Finding Clarity Through Peer Guidance at Purpose Factory
August 20, 2025

Running a business can feel isolating without peers who understand the weight of leadership. Madison Harris, founder of Cobalt Fund Services, found the peer guidance he needed through Purpose Factory. He gained strategic insight and real feedback from seasoned entrepreneurs at a time when his business needed clarity and structure. Harris realized Cobalt wasn’t…

Read More