{"id":88431,"date":"2023-03-07T08:15:00","date_gmt":"2023-03-07T08:15:00","guid":{"rendered":"https:\/\/cloudnewshub.com\/?p=88431"},"modified":"2023-03-07T08:15:00","modified_gmt":"2023-03-07T08:15:00","slug":"dutch-hospitals-underestimate-impact-of-cyber-attack","status":"publish","type":"post","link":"https:\/\/cloudnewshub.com\/?p=88431","title":{"rendered":"Dutch hospitals underestimate impact of cyber attack"},"content":{"rendered":"
<\/div>\n

Pro-Russian distributed denial-of-service (DDoS) attackers have recently targeted Dutch hospitals, according to Z-Cert, a partnership of hospitals for digital security. It is believed to be an attack from the group Killnet in collaboration with other attackers.  <\/p>\n

The impact of such cyber incidents on hospitals is enormous<\/a>. Liselotte van Boven, a physician involved in researching the impact of cyber attacks on hospitals in Europe and the US, said: \u201cThey can impact acute patient care, including emergency department closure and the cancelation of operations.\u201d<\/p>\n

Previous research into internal hospital crises and disasters (IHCDs) showed that IT-related IHCDs occur regularly in the Netherlands. \u201cThat is why I wanted to dig deeper into the impact of such failures,\u201d said Van Boven.<\/p>\n

Her research comprised a systematic scoping review of major acute care disruptions in Dutch hospitals between 2000 and 2020. She identified 39 IT failures resulting in acute care disruption, of which 85% were primary IT failures such as computer network outages or hospital software failures. Secondary events predominantly resulted from power failure.  <\/p>\n

\u201cThe most striking conclusion was that the majority of the incidents occurred in the past decade,\u201d said Van Boven.<\/p>\n

Dennis Barten, an emergency physician and supervisor to Van Boven, added: \u201cThis skyrocketing impact seems to be attributable to the increased dependence on digital systems.\u201d   <\/p>\n

\n

<\/i>Appalling ransomware consequences  <\/h3>\n

Cyber attacks have not yet led to major incidents involving the deaths of patients in the Netherlands, but this might be a matter of time, according to Barten.<\/p>\n

\u201cThe healthcare sector in the Netherlands is ever more aware of the threat of cyber incidents<\/a>, but as there haven\u2019t been any major examples, such as the attack on the health service executive of Ireland in 2021, the focus still lies primarily on patient care,\u201d he said.<\/p>\n

\u201cThat is of major importance, but patient care is directly affected by the failure of a hospital\u2019s digital systems. This stresses the urge to improve IT security and business continuity in today\u2019s hospitals.\u201d<\/p>\n

The recent DDoS attacks on Dutch hospitals have shown the importance of cyber awareness in the sector.  <\/p>\n

Van Boven said: \u201cSuch an attack renders the website unavailable, which causes disruption. But the consequences can be far more appalling when a hospital falls victim to a ransomware attack.\u201d <\/p>\n

In collaboration with Z-Cert<\/a>, Van Boven and Barten approached 25 hospitals in the US and Europe that had been victims of a cyber attack. Unfortunately, only four hospitals agreed to participate in Van Boven\u2019s study.<\/p>\n

\u201cWe can only guess why organisations are hesitant to share information. It might be a liability issue and the fear of being attacked again,\u201d said Van Boven.  <\/p>\n

The participating hospitals will remain anonymous, but Van Boven\u2019s research outcomes are comparable for US and European organisations, she said, adding: \u201cAlthough some healthcare and IT systems differ between countries, the hospitals we interviewed all reside in well-developed countries dependent on digital systems. I found it noteworthy that hospitals struggle with the same topics everywhere.\u201d<\/p>\n

The most conspicuous element of her research was the time it took hospitals to recover from a cyber incident. \u201cAnd more so, the lack of awareness in hospitals of the impact of such incidents struck me,\u201d Van Boven said. <\/p>\n

\u201cMost people working in a hospital have heard of ransomware, but the prevailing idea is that systems will be down for just a few days. They think that after that, they\u2019ll be able to return to their work as before. But that is not the case. Our research shows that recovery takes weeks, in which systems at the hospital often will be reopened in phases. This sometimes led to a priority battle between departments, each thinking theirs was the most important to reopen.\u201d<\/p>\n

Apart from this struggle, Van Boven found that a cyber attack also personally affected healthcare workers: \u201cSuch an incident brings about stress, the necessity to work more than usual, and the feeling of failure towards patients. We found this among physicians, but also in IT staff \u2013 they felt very responsible, even though it wasn\u2019t a case of who is to blame.\u201d <\/p>\n<\/section>\n

\n

<\/i>Prepare for recovery <\/h3>\n

Through their research, Van Boven and Barten aim to create a wake-up call for Dutch hospitals because healthcare organisations in The Netherlands could do with more awareness and preparedness regarding cyber threats.<\/p>\n

\u201cThis means hospitals need to examine their digital security critically. Early detection systems are key and they need to think about prioritising applications for vital patient care,\u201d they said. <\/p>\n

Furthermore, preparing for a possible cyber incident and recovery phase is essential, they said. \u201cPreparing means you don\u2019t have to decide when you\u2019re in the midst of the crisis, but you have thought through various scenarios that\u2019ll help you deflect the impact of the incident on your organisation.\u201d  <\/p>\n

This means, for instance, performing cyber crisis exercises, as many organisations do with fire drills. \u201cIt is not just about mitigating the crisis technically, but also teaching staff how to work on paper if necessary,\u201d said Van Boven.<\/p>\n

\u201cI have found that my generation is struggling with this element, as we have never had to fill out a patient status on paper. You must collectively decide on formats, where to find and file paperwork and teach younger people how to work like this in a crisis.\u201d   <\/p>\n

Dutch hospitals tend to spend the more significant part of budgets on patient care, but this needs adjusting, said Barten, adding: \u201cWe need a growing awareness within hospitals that investing in solid IT security is vital to patient care. Patients could be in danger if systems are down and in recovery for weeks, with crucial data not easily accessible. In addition, the impact of a cyber incident on acute patient care calls for solid IT systems and security.\u201d  <\/p>\n<\/section>\n","protected":false},"excerpt":{"rendered":"

Pro-Russian distributed denial-of-service (DDoS) attackers have recently targeted Dutch hospitals, according to Z-Cert, a partnership of hospitals for digital security. It is believed to be an attack from the group Killnet in collaboration with other attackers.   The impact of such cyber incidents on hospitals is enormous. Liselotte van Boven, a physician involved in researching the impact of cyber attacks on hospitals […]<\/p>\n","protected":false},"author":1,"featured_media":88432,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[533],"tags":[],"class_list":["post-88431","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it"],"_links":{"self":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts\/88431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=88431"}],"version-history":[{"count":0,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts\/88431\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/media\/88432"}],"wp:attachment":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=88431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=88431"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=88431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}