America’s healthcare system is vulnerable

This spring saw a surge in cyberattacks targeting health care providers and insurers, resulting in hospitals being unable to care for patients and Americans struggling to access affordable medications. These attacks are part of a larger trend of increased cyberattacks in the health care industry.

In February, an attack on Change Healthcare, a company that processes insurance claims, may have exposed the data of a significant portion of Americans, according to the CEO of UnitedHealth, the company that owns Change Healthcare.

Experts believe health care organizations are prime targets for hackers due to the valuable information they store, as well as outdated software and infrastructure that make them vulnerable. Neglect of cybersecurity measures in the face of high costs and the complexities of the industry has further exacerbated this issue.

The Biden administration has proposed fines for organizations that experience cyberattacks to encourage better cybersecurity practices, although some, like tech CEO Steven McKeon, question the effectiveness of this approach. The American Hospital Association also opposes fines, arguing that they would detract from resources needed to combat cybercrime.

Alex Hamerstone, from TrustedSec, highlights the importance of not just implementing controls for the sake of compliance but focusing on effective security measures to protect patient and system security. The attack on Change Healthcare in February raised antitrust concerns on Capitol Hill, with Rep. Anna Eshoo linking UnitedHealth’s practices to national security risks.

Overall, experts emphasize the need for the health care industry to enhance preparedness and security measures to counter the growing threat of cyberattacks.