Numerous industries experience patient data breaches
Patient data breaches extend beyond the healthcare sector, with a recent study of businesses in countries including Australia finding that the breaches affect 90% of the industries examined.
The study by Verizon Enterprise Solutions found that despite the ubiquity of such breaches, companies in many industries are not even aware they retain patient data, let alone that this data is at risk.
But patient data is often held in sources including employee records, including workers compensation claims, or information for corporate wellness programs.
The report analysed more than 1900 data breaches in 25 countries including Australia and New Zealand and found that 18 of the 20 industries examined fell victim to such a breach.
It found that 392 million combined patient records were exposed in breaches which spanned industries including health care, agriculture, manufacturing, retail, finance, education and public service.
Uniquely among personal health information breaches, attacks are carried out by external and internal actors in roughly equal proportion.
The primary action of attack is lost portable devices, while the second most common cause of data breach is administrative error, such as sending a medical report to the wrong recipient. Combined with employees abusing their privileges to access the data, these three actions account for 86% of health data breaches.
Report lead author Suzanne Widup said there could be major consequences for the healthcare sector if patients lose faith in the security of their private information.
“Healthcare organisations need to realise that patients trust them with their data, and if that trust is broken, the implications can be huge,” she said.
“[Patient data breaches] can lead to significant consequences impacting an individual and their family and increasing healthcare costs for governments, organisations and individuals. Protected health information is highly coveted by today’s cybercriminals.”
Emergency onboarding: what to do before and after a data breach
Organisations that have an emergency onboarding plan are better positioned to have their business...
Savvy directors are demanding more points of proof when cyber incidents occur
Pre-agreement on what a post-incident forensics effort should produce — and testing it out...
Cyber-attack prevention is better than a cure
Corporate and political decision-makers need to invest in areas that do a better job of...
