Healthcare Sector 2023 Threat Landscape Report

This document is a report detailing the 2023 threat landscape for the healthcare sector, emphasizing the rise in ransomware and digital extortion attacks. It outlines how threat actors are increasingly targeting interconnected parties within the healthcare supply chain, exploiting vulnerabilities in endpoint devices and third-party software. The report describes the growing complexity of social engineering methods and the use of malicious malware, which facilitates easy theft of sensitive information. It notes that the healthcare sector is particularly vulnerable due to its handling of sensitive data and reliance on aging IT infrastructure. The report also highlights that attacks are likely underreported, as organizations may pay ransom demands to avoid disruption. Furthermore, it discusses the rise of Initial Access Brokers selling illicit access to healthcare organizations and the increasing sophistication of threat actors, which complicates detection and mitigation efforts. The report concludes with recommendations for integrating tactical threat intelligence into supply chain management.