DATASHEET
Cybercrime Threats to The Healthcare Sector
Ransomware, initial access sales, data leaks and hacktivist DDoS against healthcare in 2023.
Share:
Healthcare is a prime target for cybercriminals: hospitals, clinics, mental health organizations and pharmaceutical companies hold some of the most sensitive data there is and deliver services that cannot stop. This datasheet reviews the persistent threats KELA observed against the sector in 2023, from ransomware and network access offers to data breaches and hacktivist attacks.
Ransomware and extortion actors have hit more than 800 healthcare victims since 2021, with the United States accounting for around 63% of attacks and LockBit, Clop, Alphv and BianLian responsible for about half of them.
What's inside:
- Ransomware attacks on healthcare and their impact on patient care, with the most active groups
- Around 85 network access listings for healthcare organizations sold by initial access brokers in 2023
- Data leaks of patient records, medical reports and doctors’ PII traded on cybercrime forums
- DDoS and hacktivism against hospitals during the Israel-Hamas and Russia-Ukraine conflicts
- Recommendations: awareness training, backups, MFA, incident response and monitoring cybercrime sources
