medical devices

Healthcare Industry Facing Growing Range of Cyber Threats From Hackers, Foreign Countries

A new report predicts a new frontier of cyber attacks for healthcare organizations, including ransomware, international espionage and the hacking of biomedical devices.

Thanks to the wealth of sensitive data maintained by healthcare organizations, the healthcare industry is facing a wide “range of threat actors and malicious activity” from criminals and even other countries, cybersecurity firm FireEye finds in a report released Wednesday.

“Given the critical role it plays within society and its relationship with our most sensitive information, the risk to this sector is especially consequential,” FireEye writes.

The current threat landscape can be separated into two different categories, the company found: theft of data and “disruptive and destructive threats.” Most hackers targeting the industry are motivated by financial gain, but a relatively smaller threat includes cyber espionage campaigns conducted by international actors, most notably China.

Those actors appear to be driven by an “interest in acquiring medical research and collecting large data sets of information, potentially for the purpose of fostering intelligence operations.” In April, suspected Chinese cyber espionage hackers targeted an American health center that focuses on cancer research, a high priority for a country facing growing cancer and mortality rates.

In addition, healthcare organizations also face the potential consequences of disruptive and destructive threats, which can hurt the ability of healthcare providers to conduct normal operations.

FireEye found that the industry was particularly vulnerable to ransomware attacks, which locks out administrators from their systems until they pay a fine to regain access. Ransomware has recently paralyzed cities like Atlanta and Baltimore, most recently shutting down certain systems in 23 local Texas governments in what the state believes was a coordinated attack.

Perhaps the most concerning finding in the report was FireEye’s prediction that medical devices will become the next target for hackers. The firm found that the use of healthcare-focused IoT devices -- including remote patient monitoring and tracking systems -- “increase the theoretical attack surface” for healthcare providers.

Indeed, FireEye found that several such devices are “insecure by design” in order to provide access to data for providers and physicians. “We suspect that other types of medical devices have similar security shortfalls,” the report reads.

The company predicts that the threat landscape in this area will only grow larger.

“Looking forward, the increasing number of biomedical devices used for critical functions within hospitals and healthcare providers presents a growing security challenge,” the report reads. ‘Furthermore—given their importance and value—a growing willingness by cyber crime, or, in a period of heightened geopolitical tensions, nation state actors—to deploy disruptive and destructive tools may significantly increase the impact from these threats we have observed to date.”

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • Accelerating a Pathway

    There is a new trend touting the transformational qualities of AI’s ability to deliver actionable data and predictive analysis that in many instances, seems to be a bit of an overpromise. The reality is that very few solutions in the cyber-physical security (CPS) space live up to this high expectation with the one exception being the new generation of Physical Identity and Access Management (PIAM) software – herein recategorized as PIAM+. Read Now

  • Protecting Your Zones

    It is game day. You can feel the crowd’s energy. In the parking lot. At the gate. In the stadium. On the concourse. Fans are eager to party. Food and merchandise vendors ready themselves for the rush. Read Now

  • Street Smarts

    The ongoing acceptance of AI and advanced data analytics has allowed surveillance camera technology to shift from being a tactical tool to a strategic business solution. Combining traditional surveillance technology with AI-based data-driven insights can streamline transportation systems, enhance traffic management, improve situational awareness, optimize resource allocation and streamline emergency response procedures. Read Now

  • The Progress of Biometrics

  • Next-Gen AI for Smart Cities

    The future of smart city technology is not being shaped in Silicon Valley — it is taking root in Dubuque, Iowa. With a population of about 60,000, this mid-sized city has become a live testbed for AI-driven traffic management thanks to a unique public-private collaboration led by Milestone Systems. Project Hafnia demonstrates how cities can transform urban mobility and safety through Responsible Technology—without costly infrastructure overhauls. Read Now

New Products

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.