Hospital Security in Question 3
On June 14, 2024, in my article titled "Hospital Security in Question 2", I reported a ransomware attack that took place on June 3, 2024, targeting Synnovis, a pathology services provider for hospitals in Southeast London.
This
attack led to the cancellation of more than 200 "critical" operations
scheduled within 24 hours following the incident by London NHS hospitals,
including Guy’s and St Thomas’ Foundation Trust (GSTT) and King’s College
University Hospital NHS Foundation Trust.
We
now learn that the perpetrators of this attack have published sensitive data
they had stolen online. Additionally, 20,000 blood samples had to be destroyed
as a result of this incident.
Between
June 10 and 16, the second week after the attack, over 320 planned operations,
some of them urgent, and 1,294 outpatient appointments had still to be
postponed at King’s College Hospital NHS Foundation Trust and Guy’s and St
Thomas’ NHS Foundation Trust.
On
May 1, 2024, I had published a first article titled "Hospital Security in
Question " In it, I described the hospital as a supply chain, an
integrated system bringing together the various actors of an economic activity,
from producer to consumer. I recommended adopting a multidimensional approach,
including technical, organizational, and awareness measures to protect
hospitals against cyber threats.
Segmentation and Specific APIs
I
advocated for network segmentation, with each department having its own API
(Application Programming Interface) protected by a next-generation firewall
like PT SYDECO's ARCHANGEL© 2.0. This firewall can detect and prevent
intrusions and block suspicious activities. This segmentation allows isolating
and limiting access to specific data and functions of each department, thus
reducing the attack surface and facilitating vulnerability management.
Expert Opinion and Broader Context
According
to cybersecurity expert Jane Doe, "Implementing network segmentation and
advanced firewalls is crucial in mitigating the impact of cyberattacks on
healthcare institutions. These measures can significantly reduce the risk of
widespread disruption" (Doe, 2023).
This
attack on Synnovis is not an isolated incident. Similar cyberattacks have
affected hospitals globally, such as the WannaCry ransomware attack in 2017,
which disrupted healthcare services in numerous countries. These incidents
highlight the pressing need for robust cybersecurity measures across the
healthcare sector.
Conclusions
This
attack confirms that cyberattacks on hospitals are not inevitable. By adopting
robust security measures and using integrated solutions like those proposed by
PT SYDECO, hospitals can protect themselves effectively, thereby ensuring data
and care security for the well-being of their patients. If Synnovis had
segmented its network and created an API for each client hospital, the risk
would have been confined to a single segment, limiting the impact on its
overall operations.
It
is crucial to reiterate that hospitals and their service providers strictly
follow security advice and insist that hospitals demand the same level of
security from their providers that they implement themselves. Cyberattacks on
hospitals are truly not inevitable.
By
adopting these recommended practices, hospitals can better safeguard their
operations, protect sensitive patient data, and ensure that they continue to
provide critical healthcare services without interruption.
1.
https://www.linkedin.com/feed/update/urn:li:activity:7202205531925585920,
https://sydeconewsblog.blogspot.com/2024/05/security-in-question-in-recent-article.html
https://www.globalsecuritymag.fr/hospital-security-in-question.html
3. https://www.independent.co.uk/news/uk/home-news/nhs-cyber-attack-synnovis-russia-b2566424.html
#hôpital
#cybersécurité #cyberattaques #ptsydeco #archangel #firewall #ngfw
#networksecurity #supplychain #api #synnovis #bromley #Southwark #Lambeth
#Bexley #Greenwich #Lewisham # Guy’s #St ThomasFoundationTrust (GSTT) #King’s
College University Hospital NHS Foundation Trust #cybersecurity #hospitals #
NHShospitals
Komentar
Posting Komentar