<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=905697862838810&amp;ev=PageView&amp;noscript=1">

Subscribe

    Fraud & Cyber Security | 2 min read

    Cyber Security: The Bug That Can Take Down Your Medical Practice

    In 2016,1 a hospital in California was the victim of a ransomware attack. Hackers shut down the internal computer system at Hollywood Presbyterian Medical Center for over a week, encrypting protected patient files, emails, billing, and other sensitive data.

    The hackers were demanding $3.7 million in ransom before they would relinquish control of the information obtained from the hospital’s server. Tim Erlin, a spokesperson from the hospital, said that the attack “seriously degraded their ability to deliver care.”

    Attacks like this are becoming increasingly common, and medical businesses are a big target. Cyber attacks can derail business operations, cost companies thousands of dollars, and damage brand images.

    Cyber attacks and data breaches have become a recurring trend in today’s society, and the most valuable currency is customer data. In the medical business world of sensitive medical records and HIPPA-protected patient files, virtually all patient and company data is prized by hackers and worth protecting for your practice.

    As breaches become more common and destructive, organizations are still perplexed about coverage and, ultimately, uncertain about cyber insurance being a necessity. In this era of increasing regulation and public awareness of data security risks, you don’t want to risk critical information falling into the wrong hands. Every practice should consider their exposure level in the event that sensitive data is compromised, but for the medical business community, cyber security needs to be a top priority.

    Data breaches

    Data is everywhere. We store it in our internal business systems and in the cloud. We collect it from our clients and share our data with business partners. Leaders need data, value it, and are able to amass it. We carry data with us and leave a digital footprint every day. Technology providers help us store it forever and share it globally. In the data breach era, leaders face greater risk if they fail to protect data throughout its lifecycle.

    Email is an easy access point and hackers can deploy massive attacks by sending out blanket emails waiting for a bite—giving them access to your practice’s sensitive information—or worse, your patient’s personal information. Medical practices are more susceptible to cyber attacks because many of their employees have access to patient information and medical records. These employees constantly work over email sharing company data, and often times aren’t properly trained on how to recognize or respond to these types of incidents.

    Data breaches can be expensive and are difficult to avoid. In a recent study, more than 50% of small- to mid-sized businesses surveyed stated they faced a cyber-security attack, and the average cost of a data breach has increased to a staggering $5.9 million!

    As data breach consequences grow, leaders must understand their data security risk. Companies face increased scrutiny from regulators, litigants, business partners, and their customers so leaders must make timely data security decisions. A data security strategy helps leaders make risk-informed decisions before their actions are reviewed after a breach.

    Why small- and mid-sized practices are at risk

    We hear about large-scale cyber incidents on the news all the time, but cyber criminals are focusing more and more of their efforts on small and mid-sized businesses. According to Chubb, 62% of all cyber breach victims are small and midsize enterprises (SME’s). Experts expect that this trend will continue to rise.

    One reason that cyber criminals are increasingly hitting SME’s is that many smaller operations do not have dedicated cyber security teams, and mistakenly believe that the expense of onboarding a cyber security expert is beyond their budget. This opens such businesses up to be an easy target for cyber criminals.

    According to Patrick Theilen, SVP at Chubb, “Cyber criminals typically don’t target specific small businesses, but they increasingly use tools that target the vulnerabilities of small businesses. Those vulnerabilities are sometimes technical, like unpatched software or poorly configured hardware. Even more commonly, those vulnerabilities are simply employees who may use weak or compromised passwords, or may inadvertently click something they shouldn’t have.”

    All medical businesses face their own types of cyber risks, and while they may not be completely avoidable, having a prevention plan, educating your employees, and proper cyber liability insurance coverage can protect your practice from the financial and operational dangers of a cyber security breach.

    1. https://www.cnbc.com/2016/02/16/the-hospital-held-hostage-by-hackers.html

    Cybersecurity Checklist 2021

    Related Categories

    Fraud & Cyber Security

    Brett Morgan

    Brett Morgan specializes in alternative risk transfer programs, professional liability, Directors & Officers liability, and employment issues centered on protecting clients’ assets. He has an extensive background in understanding property exposures and a customer’s business processes. Brett has taught various seminars on business interruption, protecting your company while conducting business in foreign countries, and protecting your client’s internal controls from theft.

    You may also like:

    Fraud & Cyber Security

    Supply Chain Hacks Threaten U.S. Companies. Is Yours Protected?

    This past Fourth of July weekend, cybercriminals launched an attack that negatively impacted well over 1,000 businesses....

    Fraud & Cyber Security Technology

    How to Keep Your Credentials Cyber Safe [Infographic]

    Many threats face the average internet user where hackers are lingering, waiting to potentially steal your login credent...

    Fraud & Cyber Security

    4 Ways to Minimize Employee Fraud and Theft

    We live in a world where fraudsters can gain access to treasure troves of data, and even your most trusted employees can...

    Let Us Know What You Thought about this Post.

    Put your Comment Below.

    contact us

    Revolutionize Your Employee Training Program with swbcU

    Learn More