73.7% Of Healthcare Firms Give In To Paying Ransomware Demands: Report

Fewer than one in four healthcare organizations have an MFA, while more than half report performing regular backups.  (Reuters/File)

Fewer than one in four healthcare organizations have an MFA, while more than half report performing regular backups. (Reuters/File)

Healthcare organizations were 73.7 percent likely to pay a ransomware demand, and are also the fourth most targeted sector by ransomware attacks globally (13 percent).

Healthcare organizations were 73.7 percent more likely to pay a ransomware demand, and they are also the fourth most targeted sector by ransomware attacks globally (13 percent), a new report said Tuesday.

As ransomware attacks become more common, organizations are taking steps to minimize damage if they do get hit, according to Arete, a global cyber risk management company.

Some of the most effective controls include backup, multifactor authentication (MFA), and endpoint detection and response (EDR), all of which can play a role in helping to keep your organization secure.

“Healthcare organizations are frequent targets of ransomware because the presence of sensitive information, including PII and PHI, can increase the likelihood of ransom payments,” said Chris Martensen, chief data officer at Arete.

“In today’s digital-first world, it is critical for healthcare organizations to build cyber security teams internally or collaborate with a third-party security partner to implement effective mitigation strategies and controls,” he added.

Fewer than one in four healthcare organizations have an MFA, while more than half report performing regular backups.

Furthermore, the report states that having just one EDR platform is one of the more effective ways to reduce the potential for payments in the healthcare sector.

Data encryption is the top technology used to effect 100 percent of ransomware cases affecting the healthcare sector. The next most popular technique was ‘inhibiting system recovery’.

The report states that to reduce the risk of data theft, user training and data backup are two key controls.

(This story has not been edited by News18 staff and is published from a syndicated news agency feed – IANS,