1 in 3 healthcare orgs hit by ransomware pay hackers, report finds

Ransomware payments are highly discouraged by the federal government, yet more than a third of healthcare organizations affected by attacks might be discreetly paying the ransom, according to a report by cybersecurity firm Sophos.

Advertisement

The global report surveyed 328 IT decision-makers in the healthcare industry from January to February.

Five things to know:

  1. Thirty-four percent of respondents were hit by a ransomware attack in the last year. Of those hit, 65 percent said the hackers successfully encrypted their data. Less than half (44 percent) were able to restore their data with backup files.
  2. More than a third (34 percent) of ransomware victims that had data encrypted paid the ransom to get their data back, but only 69 percent of encrypted data was able to be recovered.
  3. The average cost to rectify a ransomware attack, including downtime, device costs, lost opportunity and ransom paid, was $1.27 million.
  4. The average healthcare ransom payment was $131,304. 
  5. Forty-one percent of healthcare companies weren’t hit by ransomware in the last year, but expect to be hit in the future. Less than a quarter (24 percent) said they were not hit by ransomware in the last year and do not expect to be hit in the future.

At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.

Advertisement

Next Up in Cybersecurity

Advertisement

Comments are closed.