India's Health Systems Are A Top Target

India ranks second globally in cyber attacks on health systems. The government is currently promoting digitisation across the economy, although the country does not yet have specific data protection laws. As they work towards becoming Digital India, such cyber attacks causing growing concern. 

Now, a report by Artificial Intelligence company CloudSEK has found that the health sector’s speedy transition to technology due to Covid-19 has left many vulnerabilities.

The United States recorded the highest number of cyber attacks and breaches in healthcare in 2021, at 28 percent, due to heavy digitisation, and huge investments and growth opportunities in the sector that makes it a lucrative target for hackers

  • India ranked second in cyber attacks on the healthcare sector to a CloudSEK, an AI that specializes in  predicting cyber threats.
  • France ranked third in the world for the number of attacks on the healthcare industry, accounting for seven percent of all attacks. 
  • According to the report, the overall number of cyber attacks against healthcare has increased by 95.34 percent in the first four months of 2022, as compared to the number of cyber attacks in 2021.

The Indian government has been creating digital health account numbers of citizens under the Ayushman Bharat Digital Mission, which aims to digitise the health records of all patients. It has been reported that of the 23 million  health account numbers generated for individuals till August 17, three-quarters had been created using the CoWIN, national Covid-19 vaccination portal, and the databases from national the health insurance scheme.

The pandemic appears to have given impetus to the generation of health data online, often without adequate data  protection, and there are concerns that many Indian citizens do not know that these accounts had been created using their name using their unique personal 'Aadhaar' number and mobile phone details.

The Aadhaar  is a 12-digit unique identity number voluntarily available to Indian citizens and is the world's largest biometric ID system

The CloudSEK report observed that the pandemic forced the healthcare industry to adopt new technologies it was not completely equipped to handle. “The transition wasn’t smooth and left multiple gaps in cyber security for the attackers to exploit,” the CloudSEK report observed. 

Security experts have expressed concern over the large-scale digitisation of medical records and the risk of the data being misused.

In 2021, the Indian government began using the CoWIN portal and app to record immunisations against Covid-19. According to CloudSEK , vaccination records suffered the most breaches globally, followed by the personal identifiable information of health workers and patients. Personal information included name, address, email, contact number and gender.

Scroll:      Gov.In:     CNBC:    Business Fortnight:     Lite News:   JSNewstimes:     Flipboard

You Might Also Read: 

Inventive Ransomware Group Focused On Healthcare Data:

 

« New Cyber Security Laws For Telecoms Providers
Securing Hybrid Identity »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

FT Cyber Resilience Summit: Europe

FT Cyber Resilience Summit: Europe

27 November 2024 | In-Person & Digital | 22 Bishopsgate, London. Business leaders, Innovators & Experts address evolving cybersecurity risks.

King & Spalding

King & Spalding

King & Spalding is an international law firm with offices in the United States, Europe and the Middle East. Practice areas include Data, Privacy & Security.

SI-CERT

SI-CERT

SI-CERT (Slovenian Computer Emergency Response Team) is the national cyber scurity incident response center for Slovenia.

Black Duck Software

Black Duck Software

Black Duck Hub allows organizations to manage open source code security as well as license compliance risks.

Cryptus Cyber Security

Cryptus Cyber Security

Cryptus Cyber Security is an Information Security Training company providing advanced training and services to IT Professionals.

SEWORKS

SEWORKS

SEWORKS provides offensive and defensive app security that ensures mobile and web apps are safe from dangerous hacking threats.

NinjaJobs

NinjaJobs

NinjaJobs is a community-run job platform developed by information security professionals. We focusing strictly on cybersecurity positions.

Infosequre

Infosequre

Infosequre builds up your security awareness culture and turns your employees into the first line of defense against cyber risks.

Data Storage Corp (DSC)

Data Storage Corp (DSC)

Data Storage Corporation is a provider of data recovery and business continuity services that help organizations protect their data, minimize downtime and recover and restore data.

Infinipoint

Infinipoint

Infinipoint pioneers the first Device-Identity-as-a-Service (DIaaS) solution, addressing Zero Trust device access and enabling enterprises of all sizes to automate cyber hygiene.

Bittnet Training

Bittnet Training

Bittnet Training is the leader in the IT Training market in Romania. We develop the IT skills of IT professionals as well as those who wish to start a career in IT.

Sev1Tech

Sev1Tech

Sev1Tech is a leading provider of IT modernization, cloud, cybersecurity, engineering, fielding, training, and program support services.

DataStealth

DataStealth

DataStealth is a data protection platform that allows organizations to discover, classify, and protect their most sensitive data and documents.

ReachOut Technology

ReachOut Technology

ReachOut is a transformative approach to IT Security, Support, and Guidance. But we’re more than that. We’re passionate IT experts driven to make solutions to your problems.

Zanutix Consulting

Zanutix Consulting

Zanutix specialize in a wide range of services including Network Design and Implementation, Data Management, Cloud Solutions, Software Development and Cybersecurity.

Cyber Brain Academy

Cyber Brain Academy

At Cyber Brain Academy, our mission is to provide high-quality IT certification training for the cyber security workforce.

RELIANOID

RELIANOID

RELIANOID is an application delivery controller and load balancing system that ensures high performance and security of IT services on a massive scale.