Healthcare

“The healthcare sector is facing systemic, repeated cyberattacks that do not just endanger systems but are a direct threat to life.”

Stéphane Duguin, CEO, CyberPeace Institute

The COVID19 pandemic has created a new reality for the healthcare sector, globally testing its limits. In addition to the overwhelming challenge to manage the medical emergency, the sector has become a direct target for cyberattacks.Taking advantage of the pandemic, malicious actors have launched a series of phishing campaigns and ransomware attacks on healthcare organizations. Hospitals are lucrative targets due to the sensitive patient information they store and the urgency to continue providing critical medical care. They simply cannot afford to cease operations in order to counter cyber attacks, and they are more likely to pay a ransom to protect their patients.

The Threat

While the healthcare sector has long been at risk from cyberattacks, the harms to human security are heightened during crises like the COVID-19 pandemic, when people across the world are particularly reliant on health services. Cyber operations that disrupt healthcare services are a direct threat to human security, which is vital to cyberpeace.

The Victims

Healthcare providers and people in need of medical care are the victims of cyberattacks. At the peak of the pandemic, we documented one attack against healthcare providers per day: the death of a patient after a ransomware attack in Duesseldorf; the crippling of 400 hospitals run by Universal Health Services in the United States, and the leak of patient records in Finland to name a few.

The Law

Many states, private sector and civil society organizations have reaffirmed their view that international law applies in cyberspace. Existing laws offer strong protection for the health sector against cyber operations, but the effectiveness of this protection may be limited by a number of grey areas, such as differing definitions of key terms and concepts or contrasting application in different contexts.

The Impact of Cyberattacks

Recent attacks against healthcare providers and vaccine producers show a new modus operandi – double extortion. Rather than just encrypting victims’ files and requesting a ransom, the attackers exfiltrate sensitive personal data and threaten to leak it if their demands are not met.

Victim’s Story: How Hancock Regional Hospital Responded to a Ransomware Attack

It all happened in less than 48 hours: a ransomware attack, vital hospital computer systems shut down, a bitcoin payment secured on the dark web, and decryption codes used to make systems operational again.

A cyberattack no one saw coming in January 2018 taught Hancock Regional Hospital officials a valuable lesson – investing in cybersecurity is crucial.

Steve Long, CEO and President of the Hancock Regional Hospital talked to Adrien Ogee, COO of the CyberPeace Institute about how the attack unfolded in the hospital and why they decided to pay a ransom.

Attacks on Healthcare in the News

In recent months, media outlets have described attacks against medical facilities all over the world – in France, Czech Republic, China, Nicaragua, United States, Germany, Finland, Spain etc. The global health crisis has not only been a boon for cybercriminals but has also provided an opportunity for states to shift the realities of global geopolitics. This has translated directly into an escalation of nation-state activity in cyberspace. Browse through the timeline to know more.

Heatmap of Attacks

Discover the magnitude and location of cyberattacks against healthcare organizations.

Our Actions

Call to
Governments

Our Call to Action invited governments to stop cyber operations against medical facilities and protect healthcare.

Cyber 4
Healthcare

We partner with qualified companies to provide free and trusted cybersecurity assistance to healthcare professionals fighting COVID-19.

Call for
Testimonials

Healthcare needs a voice. We are calling on anyone who has experienced consequences of such attacks to share their stories.

Testimonials

One of the major challenges that hospitals around the world face is that, unfortunately, cybersecurity is yet not equal to patient safety, but it really needs to be.

After the crisis is over, we will do the analysis and share information about what worked and what didn’t, and what we learnt. Then we will come up with sustainable models.

As long as we make sure that everyone at every skills level knows that they are welcome, and we make sure they get value out of volunteering, such efforts will never slow down.

Have you been a victim of a cyberattack?
Do you need help?