Report finds that two-thirds of healthcare organisations surveyed experienced disruption to patient care due to cyberattacks 

Proofpoint, a leading cybersecurity and compliance company, and Ponemon Institute, a top IT security research organisation, released the results of their second annual survey on the effect of cybersecurity in healthcare. The report, ‘CyberInsecurity in Healthcare: The Cost and Impact on Patient Safety and Care 2023,’ found that 88% of the surveyed organisations experienced an average of 40 attacks in the past 12 months. The average total cost of a cyberattack experienced by healthcare organisations was US$4.99 million, a 13% increase from the previous year.  

Among the organisations that suffered the four most common types of attacks—cloud compromise, ransomware, supply chain, and business email compromise (BEC)—an average of 66% reported disruption to patient care. Specifically, 57% reported poor patient outcomes due to delays in procedures and tests, 50% saw an increase in medical procedure complications, and 23% experienced increased patient mortality rates. These numbers reflect last year’s findings, indicating that healthcare organisations have made little progress in mitigating the risks of cyberattacks on patient safety and well-being. 

“While the healthcare sector remains highly vulnerable to cybersecurity attacks, I’m encouraged that industry executives understand how a cyber-event can adversely impact patient care. I’m also more optimistic that significant progress can be made to protect patients from the physical harm that such attacks may cause,” said Ryan Witt, Chair, Healthcare Customer Advisory Board at Proofpoint. “Our survey shows that healthcare organisations are already aware of the cyber-risks they face. Now they must work together with their industry peers and embrace governmental support to build a stronger cybersecurity posture—and consequently, deliver the best patient care possible.”