Skip to main content

Over a Million Medical Devices Exposed Online, Revealing Private Patient Scans

Errol Weiss, Chief Security Officer, quoted on cybersecurity's link to patient safety and operational continuity.

Confidential by Design, Public by Mistake

The healthcare industry’s digital expansion may be exposing more than it protects. How would you feel if strangers online saw your MRI scan and knew your diagnosis, maybe even before you did?

That’s not a hypothetical, it’s already happening.

New research from Modat shows that more than 1.2 million internet-connected healthcare devices and systems are publicly accessible online, leaking private patient data (from brain scans to blood tests) through basic security lapses. 

Errol Weiss, Chief Security Officer at Health-ISAC, added: “The findings from Modat underscore a critical and pervasive challenge facing healthcare globally. We consistently emphasize that cybersecurity is inextricably linked to patient safety and operational continuity. This research reinforces the urgent need for comprehensive asset visibility, robust vulnerability management, and a proactive approach to securing every internet-connected device in healthcare environments, ensuring that sensitive patient data remains protected from unauthorized access and potential exploitation.” 

Modat worked closely with Health-ISAC to handle the findings responsibly, sharing details with impacted organizations. The firm also coordinated with Z-CERT, a cybersecurity response group focused on healthcare in the Netherlands. 

Read the article in Information Security Buzz. Click Here