Spanish Healthcare Service Works On Resilience

The digitisation of healthcare systems and the reliance on technology to run hospitals and healthcare facilities have made the healthcare sector an attractive target for cyber criminals. Hackers know that medical devices don’t contain any patient data themselves, however, they see them as an easy target, lacking the security found on other network devices like laptops and computers.

Threats against medical devices can cause problems for healthcare organisations, giving hackers access to other network devices or letting them install costly ransomware. Secure network devices help limit the damage caused by an attack on medical devices.

In response the  rising number of cyber threats on medical organisations, Spain’s health sector is taking decisive action.

Following the regional Catalan Government allocated funds to combat cyber threats, the Spanish Private Health Alliance (ASPE) convened a forum to deal with the serious problem. This move underscores the escalating concern over cybercrime within Spain’s health sector. 

Cyber attacks on Spanish healthcare have been increasing, affecting hospitals and healthcare centres across the country. In 2022 more than 500 institutions reported incidents, which, according to data from INCIBE, the National Institute of Cybersecurity, was an increase of 48% compared to 2021. 

The  Cybercrime Threat

The health sector in Spain is facing a significant challenge. The convergence of health data at a European level further exposes patient records to potential threats. Both public and private healthcare entities in Spain, including ASPE and the Catalan government, are rallying resources to combat this menace.

According to ASPE's Director, ‘cyber security in the health system is not an option, it is something fundamental,'  highlighting the healthcare sector’s dedication to maintaining trust through robust cybersecurity measures.  These concerns are amplified by the European Union’s move towards a unified health data market, raising the stakes for data security.

However, according to analysis by leading Spanish firm, Aiuken Cybersecurity there is  a gap between ASPE's goals and the current needs of Spanish healthcare. Aiuken criticises the sector’s outdated technological infrastructures and calls for increased investment to deter cybercriminals. The principal threats faced by the health sector includ3s ransomware. Indeed, ransomware attack on one of Barcelona’ s main hospitals last year that  crippled the main computer system and forced the cancellation of 150 non-urgent operations and up to 3,000 patient appointments.

To counter these threats, solutions such as restricting access to electronic health records and enhancing training for those with access are being proposed. With a concerted effort to improve cybersecurity, including the development of action plans and regulatory advice, Spain’s health sector aims to certify under the National Security Scheme. 

This initiative is a big step towards safeguarding patient data and ensuring the integrity of healthcare services against cyber threats, which are taking place on health systems around the world.

Euro Weekly News     |    ETKHO    |    Dig Watch     |    SC Magazine     |    Security Week     |    Swivel Secure

Image: Ideogram

You Might Also Read: 

Scottish Health Service Patient Data Hacked & Stolen:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Cambridge University Medical IT System Hacked
A New Era Of Accelerated Computing »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

APMG International (APM Group)

APMG International (APM Group)

APM Group is a global accreditation, certification and examination body specializing in certification schemes for individuals, organizations and software.

ForgeRock

ForgeRock

ForgeRock, the leader in digital identity, delivers comprehensive Identity and Access Management solutions for consumers, employees and things to simply and safely access the connected world.

CamCERT

CamCERT

CamCERT is the national Computer Emergency Response Team for Cambodia.

D3 Security

D3 Security

D3's Smart SOAR platform is at the forefront of the security automation revolution, helping clients around the world to rapidly identify, analyze, and resolve advanced threats.

Honeynet Project

Honeynet Project

The Honeynet Project is a leading international non-profit security research organization, dedicated to investigating the latest attacks and developing open source security tools.

CYBERSEC Forum

CYBERSEC Forum

CYBERSEC Forum is an annual European Public Policy Conference dedicated to strategic aspects of cybersecurity.

Ingenio Global

Ingenio Global

Ingenio is a specialist recruitment business for SaaS companies. Our purpose is to source exceptional talent in areas including cyber security for leading SaaS companies in the UK and Ireland.

Elron Ventures

Elron Ventures

Elron partner with early stage ventures to build companies that transform lives and industries. Our main areas of focus are enterprise software, cybersecurity, and healthcare.

Cobalt Iron

Cobalt Iron

Cobalt Iron is a global leader in SaaS-based enterprise backup and data protection technology.

InterGuard

InterGuard

As the pioneer for Unified Insider Threat Prevention and productivity monitoring tools, InterGuard offers on premise and SaaS-based services that are easily available and affordable.

Quantinuum

Quantinuum

Quantinuum is the combination of Cambridge Quantum with Honeywell Quantum Solutions, structured to drive the future of quantum computing.

Crayon

Crayon

Crayon is a customer-centric innovation and IT services company. We provide guidance on the best solutions for our clients’ business needs and budget with software, cloud, AI and big data.

Fusion Cyber

Fusion Cyber

Fusion Cyber educates students in Zero Trust Risk Management, Defense, and Cyber Offense that lead to taking industry-accepted cybersecurity certifications.

PatchAdvisor

PatchAdvisor

PatchAdvisor core services include Vulnerability Assessments/Penetration Testing, Application Vulnerability Assessments, and Incident Response.

Gibbs Consulting

Gibbs Consulting

Gibbs Consulting provides innovative, flexible, on-demand IT Services and IT Consulting that delivers value and successful outcomes for our clients.

Aprio

Aprio

Aprio is a premier business advisory and accounting firm. We deliver advisory, tax, managed, and private client services to build value, drive growth, manage risk, and protect wealth.