{"id":8035,"date":"2022-07-14T16:30:27","date_gmt":"2022-07-14T15:30:27","guid":{"rendered":"https:\/\/telecomkh.info\/?p=8035"},"modified":"2022-07-14T16:30:27","modified_gmt":"2022-07-14T15:30:27","slug":"ransomware-attacks-on-healthcare-organizations-increased-94-in-2021-according-to-sophos-global-survey","status":"publish","type":"post","link":"https:\/\/telecomkh.info\/?p=8035","title":{"rendered":"Ransomware attacks on healthcare organizations increased 94% in 2021, according to Sophos Global Survey"},"content":{"rendered":"

Sophos, a global leader in next-generation cybersecurity, has published a new sectoral survey report, \u201cThe State of Ransomware in Healthcare 2022.\u201d The findings reveal a 94% increase in ransomware attacks on the organizations surveyed in this sector. In 2021, 66% of healthcare organizations were hit; 34% were hit the previous year<\/strong><\/p>\n

The silver lining, however, is that healthcare organizations are getting better at dealing with the aftermath of ransomware attacks, according to the survey data. The report shows that 99% of those healthcare organizations hit by ransomware got at least some their data back after cybercriminals encrypted it during the attacks.<\/p>\n

Additional ransomware findings for the healthcare sector include:
\n\u2022 Healthcare organizations had the second-highest average ransomware recovery costs with $1.85 million, taking one week on average to recover from an attack
\n\u2022 67% of healthcare organizations think cyberattacks are more complex, based on their experience of how cyberattacks have changed over the last year; the healthcare sector had the highest percentage
\n\u2022 While healthcare organizations pay the ransom most often (61%), they\u2019re paying the lowest average ransoms, $197,000, compared with the global average of $812,000 (across all sectors in the survey)
\n\u2022 Of those organizations that paid the ransom, only 2% got all their data back
\n\u2022 61% of attacks resulted in encryption, 4% less than the global average (65%)<\/p>\n

\u201cRansomware in the healthcare space is more nuanced than other industries in terms of both protection and recovery,\u201d said John Shier, senior security expert at Sophos. \u201cThe data that healthcare organizations harness is extremely sensitive and valuable, which makes it very attractive to attackers. In addition, the need for efficient and widespread access to this type of data \u2013 so that healthcare professionals can provide proper care \u2013 means that typical two-factor authentication and zero trust defense tactics aren\u2019t always feasible. This leaves healthcare organizations particularly vulnerable, and when hit, they may opt to pay a ransom to keep pertinent, often lifesaving, patient data accessible. Due to these unique factors, healthcare organizations need to expand their anti-ransomware defenses by combining security technology with human-led threat hunting to defend against today\u2019s advanced cyberattackers.\u201d
\nMore healthcare organizations (78%) are now opting for cyber insurance, but 93% of healthcare organizations with insurance coverage report finding it more difficult to get policy coverage in the last year. With ransomware being the single largest driver of insurance claims, 51% reported the level of cybersecurity needed to qualify is higher, putting a strain on healthcare organizations with lower budgets and less technical resources available.<\/p>\n

In the light of the survey findings, Sophos experts recommend the following best practices for all organizations across all sectors:
\n\u2022 Install and maintain high-quality defenses across all points in the organization\u2019s environment. Review security controls regularly and make sure they continue to meet the organization\u2019s needs
\n\u2022 Harden the IT environment by searching for and closing key security gaps: unpatched devices, unprotected machines and open Remote Desktop Protocol ports. Extended Detection and Response (XDR) solutions are ideal for helping to close these gaps
\n\u2022 Make backups, and practice restoring from them so that the organization can get back up and running as soon as possible, with minimum disruption
\n\u2022 Proactively hunt for threats to identify and stop adversaries before they can execute their attack \u2013 if the team lacks the time or skills to do this in house, outsource to a Managed Detection and Response (MDR) specialist
\n\u2022 Prepare for the worst. Know what to do if a cyber incident occurs and keep the plan updated<\/p>\n

The State of Ransomware in Healthcare 2022 survey polled 5,600 IT professionals, including 381 healthcare respondents, in mid-sized organizations (100-5,000 employees) across 31 countries.<\/span><\/p>\n

Above, John Shier, senior security expert at Sophos \/ Image credited to Sophos<\/em><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Sophos, a global leader in next-generation cybersecurity, has published a new sectoral survey report, \u201cThe State of Ransomware in Healthcare 2022.\u201d The findings reveal a 94% increase in ransomware attacks on the organizations surveyed in this sector. In 2021, 66% of healthcare organizations were hit; 34% were hit the previous year The silver lining, however, … <\/p>\n

Continue reading \u00abRansomware attacks on healthcare organizations increased 94% in 2021, according to Sophos Global Survey\u00bb<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":8036,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[24],"tags":[],"_links":{"self":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/8035"}],"collection":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8035"}],"version-history":[{"count":1,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/8035\/revisions"}],"predecessor-version":[{"id":8037,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/8035\/revisions\/8037"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/media\/8036"}],"wp:attachment":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}