Analysis of Cybersecurity Risks in Healthcare Devices

This technical report analyzes the cybersecurity risks associated with connected medical devices and systems, particularly focusing on known exploits, ransomware, and attacks that exploit insecure connectivity. The report outlines the vulnerabilities present in healthcare delivery organizations (HDOs) and highlights the significant financial impacts of ransomware attacks, referencing a survey that indicates a high percentage of organizations have made substantial ransom payments. It details the types of devices most at risk, including imaging systems and hospital information systems, and provides statistics on the prevalence of known exploited vulnerabilities. The report also discusses the strategies employed by cybercriminals, particularly Russian ransomware groups, and their methods of attack, including double-extortion techniques. Furthermore, it emphasizes the importance of securing data in transit and at rest, especially for unencrypted data, and provides recommendations for mitigating risks associated with connected medical devices and operational technology within healthcare settings.