Lexology January 22, 2024
The health care sector faces escalating cybersecurity risks given its size, technological dependence and the sensitive nature of data used therein. According to the U.S. Department of Health and Human Service’s Office for Civil Rights, there has been an alarming increase in cybersecurity incidents since 2018, including a 93% increase in large data breaches reported from 2018 to 2022, with a notable surge in breaches involving ransomware (278% increase). Cyber-attacks in the health care industry pose significant business and legal risks for healthcare providers.
In response to these rising cyber incidents, and as part of President Biden’s larger National Cybersecurity Strategy released in March 2023, HHS issued its strategy paper entitled “Healthcare Sector Cybersecurity” on December 6, 2023. In the...