20/20 Vision in 2020

What lies ahead for the healthcare industry in 2020?  Like patient health, we can’t predict the future accurately, but we know that preventative care can go a long way when we know the risk factors.

If you’re in the business of patient care, whether that is through treatment or within a business associate partnership, your responsibilities extend beyond prescriptions and record keeping. As a business, you too need to take preventative care in maintaining the health of your business.

CyberMDX did a comprehensive report that identifies the issues affecting the healthcare industry.  They reviewed data from 2019, including the 40 million medical records that were affected by a breach, looked at information from hundreds of facilities and over a million data points, then combined it with industry and cybersecurity expertise to deliver some information that all healthcare providers and business associates need to be aware of.

What Can You Do?

We recommend reading the report in detail, but for a quick overview, here is a summary of some important points.

• • Are you a US-based mid-sized business? Hackers are finding success when targeting your profile.  Especially when you’re not located in one of the nation’s largest population areas.

• • Healthcare data is valuable. With a price tag that can go up to $1000 per record, medical information and the data that surrounds research is worth the time for cybercriminals.  Not sure how that compares?  Your coveted social security number is only worth about $1 – but a lot of those can add up if acquired!  Think your credit card is the real steal? Nope, coming in at just $110, it pales in comparison to the medical record.

• • It’s not just your laptops, logins, and networks that you need to be cognizant of. Medical devices are five times (yes, FIVE) more likely to be vulnerable to security vulnerabilities named “URGENT/11” compared to standard network equipment and devices.  These 11 vulnerabilities can allow anyone to remotely access and take control of those medical devices.  This alone should stop us all in our tracks.  With 80% of device makers reporting that medical devices are difficult to secure, the pressure needs to be also on them to meet standards.

• • 71% of Health Delivery Organizations admit that they lack a comprehensive security program. Do not be part of that statistic.  Work with a certified IT department, hire a cybersecurity expert, and ensure that you are prepared with cyber insurance for WHEN it happens.  Don’t know if you have it? ASK.

The healthcare industry is the most targeted industry in cybercrime.  That statistic hasn’t changed, and the attacks continue to rise rapidly.  You must ask the questions today that you don’t understand so that you are not asking them in the middle of a breach.  Prepare today for what will inevitably happen tomorrow.