Thursday, February 29, 2024

Health care has become a top target for cybercriminals - 29 February 2024

A warning about computer security for medical computing systems was recently raised by a neighbor named Steve Moeller.  He wrote:

Here is an article from the Seattle Times talking about the threat from cybercriminals to the national and local healthcare system: https://www.seattletimes.com/seattle-news/health/why-health-care-has-become-a-top-target-for-cybercriminals/#Echobox=1708874045 

From the article:

When a cyberattack hit Fred Hutchinson Cancer Center late last year and exposed the personal data of nearly a million patients, many were caught off guard, stunned a breach could infiltrate such a large and highly resourced health care organization. 

This is a problem and it is more widespread than most people realize.  

The Internet was designed with open access in mind, so it is proving hard to make it secure.  This means that *anything* attached to the Internet has some degree of exposure that depends on how much thought and effort the "owner" has put into security.  The answer to "how much effort" is often little to none.  This means that everything from your medical records to your banking records are at risk.  Further, your power grid, your road systems, and even your personal cars are all at risk.  The old phone system is relatively secure (ok, I remember 2600 and phone phreaks) but the new wireless systems are far more exposed.  Social media like Facebook, Instagram, Xitter, and Snapchat are all exposed, and even giants in the field like Google and Microsoft are exposed.  

My point?  You should be checking with each and every supplier you use to ask them what their security policies are.  In the main, you will find that the corporate security policies protect the corporation but you?  You are left dangling.  We need legislation that places the burden back on the corporations. 


No comments: