The Health Sector is Under Attack. But You Can Fight Back.

The report highlights the surge in cyberattacks against healthcare, citing significant breaches and increased Business Email Compromise, and outlines HHS’s planned actions starting in 2024, including voluntary Cybersecurity Performance Goals, funding incentives, stronger enforcement via Medicare/Medicaid and HIPAA updates, and an expanded one‑stop shop for sector support. It identifies top threats (social engineering, ransomware, data loss/theft, insider misuse, and attacks on networked medical devices), recurrent vulnerabilities (lack of anti-malware, segmentation, auditing, email management, and training), and advises smaller providers to adopt practical controls such as managed EDR, email protection, and security awareness training, emphasizing the need for 24/7 expert support.