Two-thirds of healthcare organizations hit by ransomware in past year: survey

• Recovery from ransomware attacks is taking longer — sometimes more than a month — as attacks increase against the healthcare industry, according to a survey published last week by cybersecurity firm Sophos.
• About two-thirds of respondents said they were hit by a ransomware attack in the past year, up from 60% the year prior. Just 34% said they were hit by a ransomware attack in Sophos’ 2021 report.
• Recovery times have also increased. Only 22% of victims fully recovered from the attack in less than a week, compared with 47% in the year prior. Nearly 40% took more than a month to return to normal operations.

Increased ransomware attacks in the healthcare sector come as other industries face fewer incidents, according to the survey, which included more than 400 respondents from healthcare organizations.

Nearly 60% of respondents from all sectors reported an attack in the 2024 survey, down from 66% in the previous two years. Healthcare has the second-highest rate of ransomware attacks globally, second only to federal governments, according to the report.

“The highly sensitive nature of healthcare information and need for accessibility will always place a bullseye on the healthcare industry from cybercriminals,” John Shier, field chief technology officer at Sophos, said in a statement. “Unfortunately, cybercriminals have learned that few healthcare organizations are prepared to respond to these attacks, demonstrated by increasingly longer recovery times.”

When ransomware attacks succeed, they can have serious consequences for healthcare organizations. On average, nearly 60% of an organization’s computers are affected by an attack, according to the survey.

To read the complete article, visit Cybersecurity Dive.