Why Healthcare Breaches Are the Most Costly: Understanding the Rising AI Threat in the Industry

The healthcare sector is facing a serious challenge when it comes to cybersecurity. A recent report from IBM reveals that the average cost of a healthcare data breach has reached $7.42 million. This marks the 14th year in a row that healthcare breaches have been the most expensive across all industries.

Surprisingly, this figure is down from last year’s average of $9.77 million and from $10.93 million two years ago. Limor Kessem, IBM’s expert on cyber crisis management, described this decrease as “a good surprise,” but cautioned that the healthcare sector is still struggling with data breaches.

The report shows that the global average cost for all industry breaches is $4.44 million, which is about $3 million less than healthcare breaches. This year marked the first decline in global breach costs in five years.

More organizations are now incorporating AI technology into their cybersecurity strategies. Kessem notes that using AI can help reduce response times, saving organizations money. However, the average healthcare organization still took a staggering 279 days to identify and contain a breach—over five weeks longer than the global average.

Interestingly, smaller healthcare providers are increasingly becoming targets for ransomware attacks. Kessem points out that these organizations often lack the robust security measures of larger hospitals, making them “lower hanging fruit.”

While healthcare systems are adopting AI to defend against cyber threats, attackers are also using AI to their advantage. Ransomware groups can now create sophisticated phishing emails with little effort. Kessem explains that AI can help attackers craft believable messages quickly, making it harder for individuals to spot scams. Phishing remains the top attack vector in the healthcare sector, allowing breaches to occur.

Furthermore, the IBM report indicates that nearly two-thirds of organizations that suffered a breach lack governance policies for their AI tools. Among those with policies, only 34% conduct regular audits. Without these checks, vulnerabilities can grow, especially with “shadow AI”—technology used by employees without company approval. The risks from shadow AI are pronounced, and organizations reporting such breaches had costs that were $670,000 higher than those with minimal shadow AI usage.

Kessem warns that as healthcare organizations rush to implement AI without proper governance, they may face larger, more damaging attacks in the future. “I think AI is going to make cyber attacks larger,” she says, predicting that next year could bring a significantly altered landscape for cyber threats.

This situation underscores a pressing need for improved cybersecurity measures in healthcare, particularly as technology evolves and attacks become increasingly sophisticated. In a world where data security is paramount, healthcare must adapt swiftly to protect sensitive information.

For further insights on data breach trends, you can check out the full IBM report here.

Source link

cybersecurity,cyberattack,breach,data,ibm,ransomware,hospital,healthcare,ai