Healthcare Cyberattack Exposes Records of More Than 1,400 U.S. Patients
An oncology company has disclosed a cybersecurity incident that exposed information belonging to more than 1,400 U.S. patients, highlighting the continuing vulnerability of healthcare organizations to digital attacks.
What Happened
Novocure, an oncology company that develops cancer treatment technology, said an August cyberattack gave unauthorized parties access to certain information systems. Reuters reported September 1 that the incident affected records connected to more than 1,400 U.S. patients.
The company has described the event as unauthorized access rather than simply a disruption of services. Investigations into incidents like this typically involve determining which systems were accessed, what information was available and whether data were copied or removed.
Why Healthcare Data Are Valuable
Healthcare organizations hold large amounts of sensitive information, including names, contact details, insurance information, medical histories and treatment records. That makes hospitals, medical-device companies and pharmaceutical organizations attractive targets for cybercriminals.
Unlike many other forms of personal information, medical records can remain sensitive for years. A compromised record can potentially expose information about a person’s health that cannot simply be replaced like a password.
A Broader Industry Problem
Novocure’s incident is part of a wider pattern of cyberattacks affecting healthcare. Reuters noted recent incidents involving medical-device and pharmaceutical companies, illustrating how threats can reach organizations throughout the healthcare supply chain.
Healthcare providers increasingly depend on connected systems, cloud services, electronic records and specialized medical devices. Those connections can improve care but also create additional points that attackers may attempt to exploit.
What Companies Must Do
Healthcare organizations need layered cybersecurity controls that include strong authentication, network monitoring, encryption, employee training, vulnerability management and tested incident-response procedures.
Security teams also need to understand the systems used by vendors and service providers. A weakness in one part of a healthcare ecosystem can create risks for other organizations that exchange information with it.
What Patients Should Watch For
Patients affected by a data breach should carefully review any notices they receive from the company. Depending on the information involved, organizations may offer credit monitoring, identity-theft protection or other assistance.
Patients should also be cautious about unexpected emails, text messages or phone calls that use medical information to appear legitimate. Cybercriminals sometimes exploit breach-related fears to conduct follow-on scams.
Privacy Is Part of Patient Safety
Protecting medical information is not separate from healthcare quality. Patients need confidence that organizations can safeguard the data required to deliver treatment, manage insurance and coordinate care.
As more healthcare functions move online, cybersecurity is becoming an operational requirement rather than an optional technology investment.
Continued Monitoring
Novocure’s investigation and notification process will determine the precise scope of the incident and the information affected. Patients who receive direct notification should follow the company’s instructions and remain alert for suspicious activity.
Related Hudson Tribune coverage: AI in medical devices.
Source: Reuters.
