Cyberattacks on healthcare: A global threat to patient safety

NEW YORK, 9th November, 2024 (WAM) -- The United Nations has issued a stark warning about the escalating threat of ransomware attacks targeting global healthcare institutions, which are placing vital healthcare services and patient safety at severe risk.

Addressing the United Nations Security Council on Friday, World Health Organisation (WHO) Director-General Dr. Tedros Adhanom Ghebreyesus, underscored the urgency of confronting this crisis and called for unified global action to protect healthcare systems from the disruptive and potentially life-threatening impacts of cyberattacks.

The Security Council convened to address the growing trend of cyberattacks in healthcare, an initiative championed by France, Japan, Malta, the Republic of Korea, Slovenia, the United Kingdom, and the United States. In recent years, ransomware attacks—a form of cyber assault where malicious actors encrypt files and demand payment for their release—have surged in both frequency and complexity. According to a 2021 survey, over one-third of healthcare institutions worldwide reported experiencing at least one ransomware attack, with a significant portion paying ransoms to regain access.

Highlighting the devastating consequences of such attacks, Dr. Tedros remarked, “Ransomware and other cyberattacks on hospitals and health facilities are not just issues of security and confidentiality—they can mean the difference between life and death. At best, these attacks disrupt healthcare services and impose financial burdens. At worst, they erode public trust in healthcare systems, leading to patient harm and, tragically, even loss of life.”

Cyberattacks have also disrupted the biomedical supply chain, with hackers targeting companies involved in manufacturing COVID-19 vaccines, clinical trial software vendors, and testing laboratories. Dr. Tedros stressed that even in cases where ransoms are paid, the recovery of encrypted data is not guaranteed, further complicating the path to resilience for health systems globally.

The WHO, in collaboration with international partners, is committed to strengthening cybersecurity measures across the healthcare sector to safeguard patients, health data, and the integrity of healthcare systems worldwide.