Digital Disasters: The Growing Threat of Healthcare Ransomware

Abstract

Healthcare cybersecurity incidents are increasing in frequency and severity. Ransomware, a type of malicious software that results in the encryption of data and systems for financial extortion, often renders computers and networks inaccessible for prolonged periods of time. Clinical workflows, which depend on connected technology such as electronic health records, laboratory systems, and imaging platforms, may be delayed or disrupted in the setting of a ransomware attack. These attacks may adversely affect the care of patients with time-sensitive conditions. The financial impacts to healthcare delivery organizations can be substantial and may be associated with delayed provider payments, regulatory fines, and class action liability. Higher-quality research that characterizes patient outcomes and the development of ransomware-specific emergency response plans are needed to increase cybersecurity resiliency of healthcare systems. Possessing relevant acute care clinical skills and operational expertise, anesthesiologists are well positioned to lead patient safety efforts in this domain.