Data protection in medical facilities. Disturbing report from Veeam company.

In 2023, as many as 91% of healthcare facilities were attacked by malicious ransomware software - according to the Data Protection Trends Report 2023 by Veeam. In 2022, this percentage was 76%.

Data protection in medical facilities. Disturbing report from Veeam company.
00:00 00:00

Summary

  • The loss of sensitive data can disrupt medical facilities' operations and endanger patients' health. In severe attacks on the healthcare industry last year, up to 39% of data was encrypted or destroyed, with only 55% of resources recoverable.
  • A Veeam study reveals that 77% of respondents in the healthcare sector perceive a data protection gap, the difference between the amount of data facilities can lose without negative operational effects and the frequency of backup information creation. Additionally, 88% believe their facilities have an availability gap, the difference between the necessary restoration time after a failure and the IT department's capabilities. These percentages have decreased since 2022.
  • Healthcare facilities must consider the risk of irreversible resource loss and the legal and financial consequences of improper sensitive information security. Experts recommend regular creation of backup information copies, with at least one physically isolated from the network and unchangeable, to ensure a quick return to operation after an attack.

This increase should be alarming. The loss of sensitive data can paralyze the operations of medical facilities and pose a threat to the health of patients. As indicated in the aforementioned report, in the most severe attacks in the healthcare industry last year, up to 39% of data was encrypted or destroyed. Only 55% of resources could be recovered.

The Veeam study also indicates that in the healthcare sector, 77% of respondents perceive a so-called data protection gap, i.e., the difference between how much data facilities can lose without negative effects on their operations, and how often backup copies of information are created. 88% also believe that their facilities have a availability gap, i.e., the difference between the necessary time to restore operations in case of a failure and the capabilities of the IT department. However, these values have decreased over the past year - in 2022, 96% and 93% of respondents pointed to availability and protection gaps, respectively.

In addition to data leakage into unauthorized hands, facilities must also consider the risk of irreversible loss of resources, as well as legal and financial consequences associated with improper security of sensitive information. An appropriate and reliable strategy is crucial. As experts point out, the basic means of protection should be regular creation of backup copies of information, at least one of which should be physically isolated from the network and impossible to change. Thanks to this, even if an attack on the facility is successful, the backup cannot be encrypted and a quick return of the unit to operation will be possible.