All hospitals should be concerned about cyberattacks. Here’s why

At least 389 U.S. healthcare institutions were hit by ransomware attacks this fiscal year
Read the article by Bruce Gil in Quartz
Why the healthcare industry is so vulnerable
Errol Weiss is the chief security officer of the Health-ISAC, the industry’s information sharing and analysis center. The group provides healthcare organizations with the tools to share information on cyber threats. Weiss describers it as “virtual neighborhood watch program.”
Weiss has worked in cybersecurity for over 25 years. He said that one reason health care is particularly susceptible dates back to the 1990’s when the industry first started to shift to using electronic records.
“I think the focus in those organizations at the time, as they were investing in all of these electronic health record systems and moving all the data over to those platforms, on being compliant with the HIPAA regulation and ensuring those healthcare records were were kept private, but not necessarily secure and not investing in security,” said Weiss.
Since then, the industry hasn’t invested sufficiently in cybersecurity leading to under resourced teams.
- Related Resources & News
- Potential Terror Threat Targeted at Health Sector – AHA & Health-ISAC Joint Threat Bulletin
- New Cybersecurity Policies Could Protect Patient Health Data
- CyberWire Podcast: PHP flaw sparks global attack wave
- Health-ISAC Hacking Healthcare 3-14-2025
- HSCC Aiming to Identify Healthcare Workflow Chokepoints
- New Healthcare Security Benchmark Highlights Key Investment Priorities and Risks
- Are Efforts to Help Secure Rural Hospitals Doing Any Good?
- CISA cuts $10 million annually from ISAC funding for states amid wider cyber cuts
- 2024 Health-ISAC Discussion Based Exercise Series After-Action Report
- Cobalt Strike takedown effort cuts cracked versions by 80%