Written by : Jayati Dubey
December 20, 2024
By Sanjay Sachdeva, Director – Healthcare & Lifesciences at 1Lattice
The global healthcare sector faces an unprecedented rise in cyber threats, with approximately 60% of healthcare organizations worldwide experiencing cyber-attacks each year. These attacks often target sensitive patient data and severely disrupt healthcare services. To address this growing vulnerability, the healthcare cybersecurity market is rapidly growing alongside, projected to grow at a CAGR of ~16%, reaching an estimated USD 42 billion by 2030. The United States leads in cybersecurity spending, followed by the UK, Japan, Australia, India, and France. While ransomware is the most prevalent threat, accounting for 45% of attacks, other types of cyber-attacks include Business Email Compromise (20%), DDoS (9%), Data Theft (6%), and Phishing (6%). The increasing reliance on digital health technologies and the growing threat landscape necessitate substantial investments in cybersecurity solutions to protect sensitive patient data and ensure the resilience of healthcare systems.
In India, the healthcare industry has become one of the top targets for cyber attacks, second only to the United States. Facing around 2 million cyber incidents in FY23, Indian healthcare organizations regularly contend with breaches targeting vaccination records, patient identities, financial data, and more. India’s high vulnerability highlights the need for robust cybersecurity frameworks to protect critical health data. Recognizing this, the Government of India increased its cybersecurity funding by nearly 90% in the latest fiscal year while the Indian Computer Emergency Response Team (CERT-In) has received increased funding of INR 238 Cr to enhance its capabilities in responding to cyber incidents and protecting critical infrastructure, reinforcing national defenses and urging healthcare providers to enhance their own cybersecurity measures to prevent costly data breaches.
The need for cybersecurity in Indian healthcare is propelled by multiple factors - rise in cybercrime, greater awareness of data security, and the impact of COVID-19 have all amplified the urgency to protect digital health assets. The shift to telehealth and remote access during the pandemic has further exposed vulnerabilities, while the growth of smart hospitals integrating AI and cloud storage increases the risk of unauthorized access. Government initiatives like the Ayushman Bharat Digital Mission are digitizing healthcare on a national scale, making cybersecurity essential to safeguard patient data. These drivers collectively demand that healthcare organizations adopt robust security protocols to keep pace with digital advancements.
Recent cyber attacks on prominent Indian healthcare organizations reveal the high stakes of inadequate cybersecurity. These breaches not only compromise sensitive data but also disrupt critical healthcare services, eroding patient trust and incurring financial losses. The incidents underscore a growing need for healthcare providers to prioritize cybersecurity as an essential investment, rather than an afterthought. Without adequate protection, organizations risk falling victim to ransomware attacks and data breaches, which can severely impact operations and lead to costly consequences. This urgent threat environment calls for healthcare leaders to strengthen their cybersecurity measures to mitigate risks and safeguard their patients.