Global cybersecurity threats and regulatory responses

Cybersecurity threats are evolving through diverse methods, including ransomware, malware targeting Android devices, and sophisticated social engineering scams such as AI-driven phishing and jury-duty fraud. Regulatory responses have emerged, including the European Council’s adoption of the Cyber Resilience Act and new hospital requirements in New York State.

The healthcare sector has become a primary target for these activities. In Australia, the Australian Signals Directorate reported that 95% of cyberattacks on healthcare succeeded, a rate significantly higher than the 52% success rate seen in other industries. Specific incidents include breaches of Manage My Health, 21Partnered Health GP clinics, and the telehealth platform Updoc. Globally, the Stryker Corporation suffered a politically motivated attack linked to an Iran-affiliated group that destroyed 50 terabytes of data.

In response to these vulnerabilities, experts are advising organizations to move beyond technical IT solutions toward policy-driven oversight and addressing human error, which is estimated to account for approximately 20% of healthcare breaches.