Digital health and cybersecurity experts are calling for greater focus and investment in cybersecurity for the healthcare sector after a raft of hacks, leaks and ransom demands laid its vulnerability bare.
"Healthcare experiences the highest number of data breaches globally and in Australia, over all other industries,” La Trobe University Digital Health expert Dr Tafheem Wani said.
“With advancements in healthcare technology and digitisation of health services, cybersecurity risks have significantly increased, and can grow even further.
“Hackers are especially interested in health records because they can sell the data for high prices on the black market.
“They can use the information for medical identity theft, to disrupt health services through non-state actors, and for espionage.”
Alarming vulnerabilities in healthcare
Research from cybersecurity firm Claroty has highlighted several points of concern for the healthcare industry’s digital security, including known security vulnerabilities in healthcare devices, the use of unsecured Wi-Fi networks, outdated or unsupported operating systems and increased internet connectivity across all areas of healthcare.
There is also a dearth of IT specialists and financial resources devoted to cybersecurity, particularly in rural and remote areas.
"The increase in connectivity encourages the creation of proper network architecture and an understanding of the potential vulnerabilities it opens up to hackers", Claroty vice president of research Amir Preminger said.
Preminger stressed the importance of healthcare organisations developing resilient policies and strategies, including secure remote access, risk management, and segmentation, to shield medical devices and systems from possible breaches.
Australian Government invests $6.4 million
The gaps in the healthcare sector’s digital security have not gone unnoticed by lawmakers.
The Australian Federal Government has earmarked $6.4 million to launch an Information Sharing and Analysis Centre (ISAC) for the Australian healthcare system.
“The last two years has been the beginning of a big, overdue national journey to lift up cybersecurity across the country to better protect our citizens,” Minister for Home Affairs and Cyber Security Clare O’Neil said.
“Healthcare faces a vulnerability trifecta. Cybercriminals know that every Australian depends on these essential services – and that they cannot afford to be offline over extended periods.
“Healthcare providers tend to hold highly sensitive data, and they often struggle with building and funding strong cyber protections.
“That’s why healthcare providers are one of the most common, and most damaging, targets of cyber-attack. This is a pattern we see all over the world.
“Make no mistake – we expect Australian healthcare providers to step up and protect our citizens wherever possible. But government, too, needs to give them a hand.”