⚡ Quick Summary
The Ponemon Institute and Proofpoint have released their third annual healthcare cybersecurity report, revealing that while budgets for cybersecurity are on the rise, the frequency and impact of cyberattacks continue to disrupt patient care significantly.
💡 Key Findings
- Healthcare organizations are facing four main types of cyberattacks: cloud compromise, supply chain attacks, ransomware, and business-email compromise.
- 92% of surveyed IT professionals reported experiencing at least one cyberattack in the past year, an increase from 88% the previous year.
- The average annual cybersecurity budget has increased by 12%, reaching approximately $66 million.
- Despite budget increases, the percentage of respondents citing a lack of security leadership rose dramatically from 14% to 49%.
📉 Impact on Patient Care
- Cyberattacks have been linked to direct negative effects on patient safety.
- 69% of organizations that experienced business-email compromise reported delays in procedures and tests.
- 68% of respondents indicated their organizations faced supply chain attacks, with 82% of those reporting disruptions in patient care.
- Concerns regarding insecure mobile applications have risen to 59%, surpassing concerns about insecure medical devices and employee errors.
💰 Financial Implications
- The average cost of the most expensive cyberattack reported was over $4.7 million, a slight decrease from the previous year.
- For the 36% of organizations that paid ransomware, the average payout increased to $1.1 million.
- Healthcare organizations are urged to view cybersecurity investments as essential to protecting patient data and maintaining care quality.
🤖 Role of Artificial Intelligence
- For the first time, the report examined the impact of artificial intelligence in cybersecurity.
- 54% of respondents reported that their organizations have integrated AI into their cybersecurity strategies, with 57% finding it effective in enhancing their security posture.