Spanish Healthcare Service Works On Resilience

The digitisation of healthcare systems and the reliance on technology to run hospitals and healthcare facilities have made the healthcare sector an attractive target for cyber criminals. Hackers know that medical devices don’t contain any patient data themselves, however, they see them as an easy target, lacking the security found on other network devices like laptops and computers.

Threats against medical devices can cause problems for healthcare organisations, giving hackers access to other network devices or letting them install costly ransomware. Secure network devices help limit the damage caused by an attack on medical devices.

In response the  rising number of cyber threats on medical organisations, Spain’s health sector is taking decisive action.

Following the regional Catalan Government allocated funds to combat cyber threats, the Spanish Private Health Alliance (ASPE) convened a forum to deal with the serious problem. This move underscores the escalating concern over cybercrime within Spain’s health sector. 

Cyber attacks on Spanish healthcare have been increasing, affecting hospitals and healthcare centres across the country. In 2022 more than 500 institutions reported incidents, which, according to data from INCIBE, the National Institute of Cybersecurity, was an increase of 48% compared to 2021. 

The  Cybercrime Threat

The health sector in Spain is facing a significant challenge. The convergence of health data at a European level further exposes patient records to potential threats. Both public and private healthcare entities in Spain, including ASPE and the Catalan government, are rallying resources to combat this menace.

According to ASPE's Director, ‘cyber security in the health system is not an option, it is something fundamental,'  highlighting the healthcare sector’s dedication to maintaining trust through robust cybersecurity measures.  These concerns are amplified by the European Union’s move towards a unified health data market, raising the stakes for data security.

However, according to analysis by leading Spanish firm, Aiuken Cybersecurity there is  a gap between ASPE's goals and the current needs of Spanish healthcare. Aiuken criticises the sector’s outdated technological infrastructures and calls for increased investment to deter cybercriminals. The principal threats faced by the health sector includ3s ransomware. Indeed, ransomware attack on one of Barcelona’ s main hospitals last year that  crippled the main computer system and forced the cancellation of 150 non-urgent operations and up to 3,000 patient appointments.

To counter these threats, solutions such as restricting access to electronic health records and enhancing training for those with access are being proposed. With a concerted effort to improve cybersecurity, including the development of action plans and regulatory advice, Spain’s health sector aims to certify under the National Security Scheme. 

This initiative is a big step towards safeguarding patient data and ensuring the integrity of healthcare services against cyber threats, which are taking place on health systems around the world.

Euro Weekly News     |    ETKHO    |    Dig Watch     |    SC Magazine     |    Security Week     |    Swivel Secure

Image: Ideogram

You Might Also Read: 

Scottish Health Service Patient Data Hacked & Stolen:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Cambridge University Medical IT System Hacked
A New Era Of Accelerated Computing »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

InfoSecurity Magazine

InfoSecurity Magazine

Infosecurity Magazine has over ten years of experience providing knowledge and insight into the information security industry.

AON

AON

Aon is a leading global provider of risk management (including cyber), insurance and reinsurance brokerage, human resources solutions and outsourcing services.

CipherPoint Software

CipherPoint Software

CipherPoint Software provides data-centric auditing and protection solutions for securing unstructured information

Siscon

Siscon

Siscon delivers tailor-made compliance solutions that are based on the customer's specific wishes and reality and then supplement with many years of experience in the field.

NEC

NEC

NEC offers a complete array of solutions to governments and enterprises to protect themselves from the threats of digital disruption.

Cyxtera Technologies

Cyxtera Technologies

Cyxtera offers powerful, secure IT infrastructure capabilities paired with agile, dynamic software-defined security.

Sectigo

Sectigo

Sectigo is a leading cybersecurity provider of digital identity solutions, including TLS / SSL certificates, DevOps, IoT, and enterprise-grade PKI management, as well as multi-layered web security.

spiderSilk

spiderSilk

spiderSilk is a Dubai-based cybersecurity firm, specializing in simulating the most advanced cyber offenses on your technology so you can build your best security defenses.

CYBER.ORG

CYBER.ORG

CYBER.ORG's goal is to empower educators as they prepare the next generation to succeed in the cyber workforce of tomorrow.

Adarma Security

Adarma Security

Adarma are specialists in threat management including SOC design, build & operation.

Sekuro

Sekuro

Sekuro is your leading governance and cyber security partner. Building organisational resilience. Enabling fearless innovation.

CyberScotland

CyberScotland

The CyberScotland Partnership is a collaboration of key strategic stakeholders, brought together to focus efforts on improving cyber resilience across Scotland in a coordinated and coherent way.

Surefire Cyber

Surefire Cyber

Surefire Cyber delivers swift, strong response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats with end-to-end response capabilities.

Cyber Octet

Cyber Octet

Cyber Octet is an IT Solution, Security, Training and Services company. We provide training and services from Web Application Security to ISO 27001 implementation.

ViCyber

ViCyber

ViCyber is an Australian based company whose mission is to simplify and strengthen cybersecurity for all businesses, irrespective of size.

Auria

Auria

Auria advances complex space, missile, and cyber operations with visionary solutions and software.