Priya PatelTLDR:
Change Healthcare, a subsidiary of UnitedHealth, was hit by a massive cyberattack costing $870 million to date. The attack highlighted the lack of cybersecurity preparedness in the healthcare industry, with many organizations underinvesting in cybersecurity. The industry needs to prioritize cybersecurity, invest in new technology, and implement industry best practices to protect patient data and ensure continuity of care.
In the aftermath of the cyberattack on Change Healthcare, the healthcare industry is facing critical questions about cybersecurity preparedness. The attack, which has already cost the company $870 million and could reach up to $1.6 billion, has exposed vulnerabilities in the healthcare ecosystem.
Healthcare organizations must prioritize cybersecurity and invest in new technology to protect patient data and ensure continuity of care. Industry best practices, such as the NIST Cybersecurity Framework, ongoing risk analysis, and well-exercised incident response plans, are essential to prevent and mitigate cyberattacks.
Government support is crucial in accelerating efforts to enhance cybersecurity in healthcare. Initiatives like the New York state grant funding and the Biden administration’s proposed budget increase for cybersecurity practices in hospitals are steps in the right direction. However, more support is needed to ensure that all healthcare organizations implement robust security measures.
Ultimately, cybersecurity is a critical aspect of patient safety in healthcare. Boards, executives, and government entities must prioritize cybersecurity investments to protect patient data and mitigate the impact of cyberattacks on the healthcare system.
