Privacy & Security

Mitigating and responding to cyberattacks can cost hospitals and health systems millions of dollars per incident. To prevent these attacks, most healthcare organizations have taken steps to safeguard their information technology (IT) network containing patient data and financial records. However, many may not realize that their operational technology (OT) network comprising staff card access, HVAC and other systems may be vulnerable as well.

Ben Wolf, partner in Alston & Bird's Health Care Group, told MobiHealthNews how FDA staffing cuts could slow device approvals and what companies can do to stay ahead.

A digital health literacy maturity model could aid in training and inspiring staff to adopt new tools and cybersecurity practices, says Tjasa Zajc, special advisor for HIMSS and moderator for the HIMSS25 Global Leaders Exchange panel.

A hacker accessed some sensitive data of regional staff in October.

After staff and program cuts at the U.S. Department of Veterans Affairs, lawmakers showcased how the loss of funding and employee expertise could affect care delivery for vets, data security for patients and more.

House subcommittee hearing on cybersecurity protection for legacy medical devices overshadowed by HHS cuts.

Improving cybersecurity despite resource challenges requires small healthcare providers to pull many support levers. "We need to move away from the idea that each rural hospital is solving these issues alone," says one infosec leader.

One breach is said to have impacted legacy Oracle Health servers; another has allegedly affected millions of records accessed via Oracle Cloud.

Now operating as ransomware-as-a-service, affiliates employ a double or triple extortion where they encrypt victim data, threaten to publicly release exfiltrated data if a ransom is not paid and may request an additional ransom.

How industry-specific partnerships enhance security against cyberattacks.