Report: Data breaches continue to pose problems for healthcare systems

Editor's Note

A new report from cybersecurity provider Critical Insight notes that data breaches are continuing to pose major problems for healthcare systems, an August 2023 Business Wire press release reports. Already more than 40 million patients' medical information was reportedly involved in data breaches in 2023.

Following are key findings, according to the report titled "2023 Healthcare Data Cyber Breach Report":

• Compared to the second half of 2022, the total number of breaches decreased but individual records involved in data breaches rose by 31%–from 31 million to 40 million.
• The first half of 2023 already being at 40 million data breaches is the highest number on record for a 6-month period, and it represents 74% of the total number of individuals affected in 2022.
• Most data breaches (73%) were caused by hacking/IT incidents, followed by unauthorized access/disclosure. 
• The vast majority of hacker attacks (97%) came via network server breaches, as opposed to email breaches. 
• Hackers often access these records via third-parties, as breaches were associated with business associates as opposed to healthcare providers or plans.
• Of the 40 million exposed records, 48% were linked to business associates, while 43% were associated with healthcare providers. 

Critical Insight advises organizations to implement an incident response plan and a NIST-CSF-based risk assessment to build a multiyear strategy, as well as to track the cybersecurity of partners and to safeguard third-party vendors, business associates, and suppliers from vulnerabilities.