Security News > 2023 > August > Large-scale breaches overshadow decline in number of healthcare data incidents

While H1 2023 saw an encouraging decrease in the overall number of data breaches impacting healthcare organizations, it was overshadowed by large-scale breaches resulting in a significant increase in the number of individuals affected, which reached record levels, according to Critical Insight.

Notably, the report revealed a decrease in total breaches but an increase in the number of individuals affected; the focus of attacks on the supply chain and third-party associates; and, particularly noteworthy, the shift in some attackers' strategies from encryption to extortion.

The reduced number of breaches in the first half of this year suggests that the overall number may be lower for the entire year.

Compared to the first-most affected breach type in the previous reporting period, unauthorized access/disclosure was the second-most prevalent type in 1H 2023, with a notable increase from 15% in 2022 to 23%. Theft, losing records, and improper disposal were relatively insignificant contributors to data breaches.

Network server breaches are responsible for a staggering 97% of individual records affected, while only 2% can be attributed to email breaches.

Hackers have intensified their attacks on third-party business associates as breaches associated with business associates have steadily risen and were significantly higher than individuals affected in healthcare provider and health plan-related breaches.

News URL

https://www.helpnetsecurity.com/2023/08/23/healthcare-breaches-h1-2023/