Cyber-Physical Attacks and the Value of Healthcare Data: Facing an Era of Cyber Extortion and Organised Crime

Ibarra, Jaime; Jahankhani, Hamid; Kendzierskyj, Stefan

doi:10.1007/978-3-030-11289-9_5

Cited by 12 publications

(3 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…retrieved from a personal health record of an individual on black market. Such medical record is usually cost for approximately 1000$ (Ibarra, J., Jahankhani, H., & Kendzierskyj, S. (2019). Not only the individual face violation of their privacy but also faces the threat of his/her information being misused.…”

Section: Cyber-threats and Healthcarementioning

confidence: 99%

An Evidence-Based Investigation of Cert-In's Reporting on Cyber-Threats in Healthcare Sector

Raizada,

Biswal

2024

RCD

View full text Add to dashboard Cite

The pandemic underscored the significance of a digital health system. Healthcare sector has become one of the most important infrastructures since then. Undoubtedly, the digital health is the ultimate way to ensure accessibility, inclusiveness and delivery of healthcare services in an affordable and efficient manner. However, rising cyber-threat is one of the biggest concerns for healthcare organizations. The data breach incidents on Indian Council of Medical Research and on Covid-19 vaccine database in 2023 highlight the utter need to address the issue. To mitigate such incidents, India has established Computer Emergency and Response Team (CERT-In) which has been endowed with primary responsibility to prevent, treat, respond and report such threats. Although, CERT-In is responsible to report any cyber-incident but there is no information concerning the affected organizations and on frequency and severity of such cyber-incidents. It is doubtful as to how any authority is supposed to respond in lack of data or policy makers formulate a comprehensive framework to deal with the issue. CERT-In faces challenges in accurately reporting cyber incidents and contain discrepancies compared to other organizations' data and lacking detailed incident information. This research aims to analyze government records and secondary sources to understand the cyber-threat landscape, particularly in the healthcare industry. Using normative and comparative methods, it suggests measures which can be adopted by CERT-In based on assessments of U.S. and E.U. reporting practices. Findings stress the need for improved reporting practices and transparency in cybersecurity assessments to enhance data accuracy and completeness, urging policymakers and stakeholders to take action against cyber threats.

show abstract

Section: Cyber-threats and Healthcarementioning

confidence: 99%

An Evidence-Based Investigation of Cert-In's Reporting on Cyber-Threats in Healthcare Sector

Raizada,

Biswal

2024

RCD

View full text Add to dashboard Cite

show abstract

“…8 These are nontrivial as they can end up costing institutions millions of dollars, and possibly even result in the loss and erasure of valuable patient records. 9 This is arguably due to the value of the data housed in hospitals, the inherent privacy of the data, the need to have constant access to the data, and the risk averse nature of these institutions. In addition, hospitals have many internet of things (IoT) medical devices (MDIoT) from varied manufacturers scattered throughout the campus, each one needing to access the hospital's central intranet, and, as such, each one a potential access point for a hacker.…”

Section: Hospital Neuro-devicesmentioning

confidence: 99%

Cyberbiosecurity: An Emerging Field that has Ethical Implications for Clinical Neuroscience

Greenbaum

2021

Camb Q Healthc Ethics

View full text Add to dashboard Cite

Cyberbiosecurity is an emerging field that relates to the intersection of cybersecurity and the clinical and research practice in the biosciences. Beyond the concerns that usually arise in the areas of genomics, this paper highlights ethical concerns raised by cyberbiosecurity in clinical neuroscience. These concerns relate not only to the privacy of the data collected by imaging devices, but also the concern that patients using various stimulatory devices can be harmed by a hacker who either obfuscates the outputs or who interferes with the stimulatory process. The paper offers some suggestions as to how to rectify these increasingly dire concerns.

show abstract

“…The research literature deals with cyberattacks on the health-care sector (Beavers and Pournouri, 2019;Strielkina et al, 2018), especially towards information and operational systems (Dogaru and Dumitrache, 2017), implications on new technologies (Saleem et al, 2017), for example, new Internet of Things technologies in the health-care institutions and applications (Alharam and El-Madany, 2017;Alromaihi et al, 2018;Chacko and Hayajneh, 2018; Cyberattacks against the health-care sectors 137 Djenna and Saidouni, 2019;Strielkina et al, 2018), use of drones to breach to wireless health-care systems and even to wearable health-care sensors (Sethuraman et al, 2020). Those threats aimed to disturb and disrupt the normal function of the health-care sector and are reflected in different kinds of attacks as follows: phishing (Wright et al, 2016); false data injection attacks to information systems in health-care institutions (Ahmed and Barkat Ullah, 2018); extorsion of electronic health records to be sold in the darknet (Ibarra et al, 2019); ransomware towards health-care institutions (Paul et al, 2018;Spence et al, 2018); and malicious insider threats and employees' insecure behavior and inadvertent mistakes (Ayala, 2016;Coventry et al, 2020).…”

Section: Introductionmentioning

confidence: 99%

Cyberattacks against the health-care sectors during the COVID-19 pandemic

Gafni

Pavel

2021

ICS

View full text Add to dashboard Cite

Purpose This paper aims to analyze the changes in cyberattacks against the health-care sector during the COVID-19 pandemic. Design/methodology/approach The changes in cyberattacks of the health-care sector are analyzed by examination of the number and essence of published news concerning cybersecurity attacks on the health-care sector during 2019 and compared them to those published during 2020, based on two main websites, which review such incidents. Findings This study found that there was a significant growth in reports of cyberattacks on the health-care sector. Moreover, the number of cyberattacks fit interestingly to the pattern of waves of the disease, which expanded worldwide. During the first wave the number of reports was doubled or even tripled, compared to the same period in 2019, a tendency that was slightly waned afterwards. Practical implications This study helps to deepen the awareness of information security implications of a potential global devastating crisis, even in the cybersecurity domain, and on the health-care sector, among various other affected sectors and domains. Social implications COVID-19 pandemic created long-term wide-range changes that affect every individual and sector, mainly owing to the shift to remote working model, which impose long-term new cybersecurity changes, among them to the health-care industry. Originality/value This paper extends the existing information on implication of remote working model on information security and of the COVID-19 pandemic on the cybersecurity of health-care institutions around the world.

show abstract

Cyber-Physical Attacks and the Value of Healthcare Data: Facing an Era of Cyber Extortion and Organised Crime

Cited by 12 publications

References 11 publications

An Evidence-Based Investigation of Cert-In's Reporting on Cyber-Threats in Healthcare Sector

An Evidence-Based Investigation of Cert-In's Reporting on Cyber-Threats in Healthcare Sector

Cyberbiosecurity: An Emerging Field that has Ethical Implications for Clinical Neuroscience

Cyberattacks against the health-care sectors during the COVID-19 pandemic

Contact Info

Product

Resources

About