Most healthcare organizations experienced a cyberattack in the past year
The HIPAA Journal recently published survey results showing that more than three-quarters of respondents experienced a cyberattack at their healthcare organization in the last year.
The survey, conducted by Netwrix, studied over 1300 healthcare IT and security professionals according to The HIPAA Journal’s post about the results. The majority of incidents were account hijacking and phishing related between institutions that have a cloud-based infrastructure and institutions that have an on-premises infrastructure.
74% reported the most account compromises if they had a cloud-based infrastructure followed by 62% phishing incidents. Additionally, “For organizations with on-premises infrastructure, phishing was the most common type of attack with 63% of respondents having experienced at least one phishing attack in the past 12 months.” Those organizations experienced the second most account hijacking (44%), according to the post. Healthcare professionals are “particularly vulnerable to phishing attacks and are less likely than workers in other sectors to receive regular security awareness training.”
Financial burden was a result of 69% of healthcare cyberattacks, making “cyberattacks on healthcare organizations are more likely to cause financial damage than attacks on other sectors.”
Regarding cybersecurity priorities, most respondents reported data and network security having the greatest importance.