Healthcare sector faces rising cybersecurity threats and high breach success rates

The healthcare sector is facing an escalating cybersecurity crisis, with data showing it is the most targeted industry for breaches. In Australia, the Australian Signals Directorate reported that 95% of cyberattacks on healthcare succeeded last year, a significantly higher success rate than the 52% seen in other industries.

Recent incidents in Australia include a January hack of Manage My Health affecting 125,000 users, a June ransom attack on 21Partnered Health GP clinics, and a July breach of the telehealth platform Updoc. Globally, Stryker Corporation suffered a politically motivated attack attributed to an Iran-linked group, which destroyed 50 terabytes of data and impacted 200,000 devices.

Experts suggest that boards of directors should shift their focus from purely technical IT solutions to robust policy-driven oversight. Effective management involves addressing human error—which accounts for approximately 20% of healthcare breaches—and fostering an organizational culture of security awareness to mitigate risks such as phishing and weak passwords.