86% Of Cloud Attacks In The Healthcare Sector Lead To Financial Losses

Key Highlights

• According to the Cloud S// ecurity Report 2022 by cybersecurity vendor Netwrix, 61% of companies in the healthcare sector suffered a cyberattack on their cloud infrastructure within the last 12 months, compared to 53% for other verticals.
• Phishing was the most common type of cloud attack reported, followed by ransomware or other malware attacks and targeted attacks on cloud infrastructure.

Dirk Schrader, VP of security research at Netwrix, said that the healthcare sector is a lucrative target for attackers because the chances of success are higher.

With patient health being the main priority for these organizations, IT security resources are frequently stretched and are concentrated on maintaining only the most necessary functions. Also, the high data value gives cybercriminals better opportunities for financial gain.

An attack in the healthcare sector is more likely to have financial consequences. 32% of respondents from other industries report that an attack had no impact on their business, while only 14% of healthcare organizations say the same. Unplanned expenses to cover security gaps and compliance fines are the most common types of damage the healthcare sector faces due to a cyberattack.

Schrader added that healthcare organizations plan to increase the share of their workload in the cloud from 38% to 54% by the end of 2023. Fast cloud adoption should be accompanied by relevant security measures and exceptional attention to internet-of-things (IoT) devices and systems. For instance, the compromise of respirators or IV infusion devices can lead to physical harm to patients.

Other Notable Findings 

• 86% of cloud attack in the healthcare sector lead to financial losses or other damage.
• 73% of healthcare organizations save sensitive data in the cloud. The most common type (45%) is patient or protected health information.
• 59% of respondents say integration with the existing IT environment is the main obstacle to faster cloud adoption compared to 41% among the other industries.
• 48% consider contractors and partners with legitimate access as the most considerable risk to data security in the cloud.