Focus on Privacy Hobbles Security at Healthcare Orgs

Independent Security Evaluators' multi-year assessment of 12 hospitals and two health data facilities found the healthcare sector focuses narrowly on protecting patient health information while being ill-prepared to defend against attacks that could disrupt services or directly harm patients; the report cites inadequate threat models, underfunded and understaffed security teams, antiquated network designs, and real-world incidents such as the Anthem data breach and the Hollywood Presbyterian ransomware infection as evidence of risk.