Did you know 13% of healthcare organizations are targeted by external cyber attacks at least once a day?

COL Mikel J. Burroughs — Mon, 31 Aug 2015 18:15:47 -0400

Did you know 13% of healthcare organizations are targeted by external cyber attacks at least once a day? Check out the statistics

RP members do we have a problem with the safeguarding of our medical information in the civilian world or what?

With the cost of healthcare rising, will protecting confidential information cause expenses to go higher?

http://www.beckershospitalreview.com/healthcare-information-technology/13-of-healthcare-organizations-targeted-by-external-cyberattacks-at-least-once-a-day.html

SFC Mark Merino SGM Steve Wettstein CH (MAJ) William Beaver PVT James Strait SMSgt Tony Barnes CSM Michael J. Uhlig MAJ Ken Landgren CPT Jack Durish PO1 John Miller SN Greg Wright Sgt Kelli Mays TSgt Julia Faulks] SSgt Private RallyPoint Member TSgt Hunter Logan SGT Sara Hodgkiss CPT Private RallyPoint Member MAJ Robert (Bob) Petrarca Sgt Aaron Kennedy, MS SSG James J. Palmer IV aka "JP4"SGT Ben Keen

13% of healthcare organizations targeted by external cyberattacks at least once a day

Providers are facing attempts to compromise data on an increasingly frequent basis and often fall prey to these attempts; 81 percent of healthcare organizations have been compromised by cyber attacks in the past two years, according to the 2015 KPMH Healthcare Cybersecurity Survey.

Response by LCDR Rabbah Rona Matlow made Aug 31 at 2015 6:17 PM

LCDR Rabbah Rona Matlow — Mon, 31 Aug 2015 18:17:38 -0400

Not at all surprising, given the modern espionage/terrorism climate today...

Response by LTC Stephen F. made Aug 31 at 2015 6:30 PM

LTC Stephen F. — Mon, 31 Aug 2015 18:30:43 -0400

No I did not know that 13% of healthcare organizations are targeted by external cyber attacks at least once a day COL Mikel J. Burroughs.
More interesting would be information on how effective in terms of penetration, delay in detection, whether it was a penetration, or access and retrieval, or all of the preceding plus infection of the system with malware, etc. How many companies are targeted multiple times successfully versus unsuccessfully? Is the cyber intelligence community sharing information with healthcare organizations to reduce vulnerability? How many of these are red team attacks?
I pose these questions here for discussion purposes. The answers to my questions should never be posted on this network :-)

Response by Cpl Private RallyPoint Member made Aug 31 at 2015 6:49 PM

Cpl Private RallyPoint Member — Mon, 31 Aug 2015 18:49:33 -0400

By mandating all medical records be electronic, obamacare gave hackers/identity thieves a new target that has a lot of personal data.

Response by PO1 Sojourner "Chancy" Phillips made Aug 31 at 2015 7:30 PM

PO1 Sojourner "Chancy" Phillips — Mon, 31 Aug 2015 19:30:42 -0400

I believe it is higher than 13 percent. I have found that getting companies and organizations to do security compliance is always a challenge because they dont take it seriously until there is a breach or loss of data. I am a SISO and my friends in the field joke that we will say employed as long as CFO's are cheap.

Security costs to implement. But it costs on average 3 - 5 times more after an incident or compromise. Until the bean counters get that fact there will continue to be serious issue of data loss. No network is 100 percent safe but if you could get companies to just implement better data security it would help immensely.

What I belive would help in changing the security focas of the health industy is patient asking about the protection of their PII. Ask where all of that paperwork with everything to steal your identity goes. Ask how your doctor office protects it. They should be protecting your SSN the same way they protect diagnoses from being disclosed.

Response by CW4 Guy Butler made Aug 31 at 2015 7:50 PM

CW4 Guy Butler — Mon, 31 Aug 2015 19:50:00 -0400

If they can make sense of the Tricare network, let's put them on retainer.

Response by PO1 William "Chip" Nagel made Sep 1 at 2015 3:55 AM

PO1 William "Chip" Nagel — Tue, 01 Sep 2015 03:55:52 -0400

I suspect any and all organizations and individuals are targeted as much. Welcome to the 21st Century.

Response by CW3 Private RallyPoint Member made Sep 2 at 2015 6:48 PM

CW3 Private RallyPoint Member — Wed, 02 Sep 2015 18:48:42 -0400

This is rather staggering statistic, but given the current state of affairs with cyber attacks become the norm in the news I am not surprised.

Response by CPT Private RallyPoint Member made Nov 26 at 2015 11:09 AM

CPT Private RallyPoint Member — Thu, 26 Nov 2015 11:09:09 -0500

I wouldn't be surprised if it was higher. Those would be considered "detected" attacks. Not mentioning unknown backdoors and attempting to physically compromising the organization.

Response by PO1 John Miller made Nov 27 at 2015 1:27 AM

PO1 John Miller — Fri, 27 Nov 2015 01:27:47 -0500

It's really not that difficult to protect and harden healthcare IT systems. No more so than other types of IT systems.
In fact, it should be cheaper. Since more and more people are becoming IT professionals, salaries are going down since more people have the same skill sets.

Response by CPT Private RallyPoint Member made Nov 27 at 2015 10:00 AM

CPT Private RallyPoint Member — Fri, 27 Nov 2015 10:00:26 -0500

COL Mikel J. Burroughs I'm surprised the number isn't higher.