87% of medical practice information is stored digitally

Healthcare cybersecurity and ransomware attacks were examined in a recent report by Software Advice. The report revealed that over a quarter of ransomware attacks directly impact patient care, leading to disrupted medical services, lost data, and compromised patient safety.

The report also highlighted that the majority (87%) of data held in medical practices today is digital. In the U.S., fifty percent of healthcare organizations have experienced a data breach, with 32% facing one in the last three years. Furthermore, 42% of practices have been targeted by ransomware attacks, with 48% of these attacks affecting patient data. More than a quarter (27%) of these attacks have a direct impact on patient care.

Despite the high risk, 63% of healthcare organizations have a cybersecurity response plan in place, leaving 37% without a formal strategy to address cyber threats. Without a plan, healthcare providers risk delays in responding to threats and an increased likelihood of data loss.

The main causes of breaches are human error and targeted attacks on data security systems. Shockingly, 74% of healthcare organizations spent less than five hours on IT security and data privacy training for their employees in 2023, with 35% dedicating two hours or less. With over half (55%) of healthcare organizations allowing employees access to more data than necessary for their roles, increased employee training is essential to help staff recognize and respond to cyber threats, including prevalent phishing scams.

Read the report.