DefinePK

Abstract

Cybercriminals increasingly target the US health sector driven by their reliance on digital networks and the lucrative value of healthcare data on the black market. As healthcare providers adopt the use of electronic health records (EHRs), networked medical devices and cloud-based systems, they unintentionally increase their attack surfaces, creating more ways for attackers to infiltrate their systems. These attacks do not only compromise patient data security but also force service interruptions which endangers patient well-being and decreases healthcare trust. Recurring ransomware attacks on hospitals have caused delays in medical care with millions of patients' medical records at risk of identity theft and financial exploitation due to breaches of EHR systems. Despite regulations like Health Insurance Portability and Accountability Act (HIPAA) mandating security standards for safeguarding patient data, these compliance standards usually fail to address the dynamic nature of cyber threats as they evolve. Moreover, most healthcare organizations face issues of limited resources and outdated systems while also lacking proper cybersecurity expertise which further exacerbates their vulnerabilities. The security of healthcare systems is additionally weakened by potential threats posed by third-party vendors and supply chain partners who often serve as gateways for attackers. Hence, this research examines some of the pressing challenges facing the US healthcare sector by analyzing statistical data, attack methodologies, and case studies to identify patterns and common causes of such breaches. This analysis examines the relationship between technical, organizational and regulatory gaps that contribute to this persistent threat landscape. In addition, this research explores security limitations of existing defense measures and provides evidence-based insights into areas where improvements are most needed.
Keywords: Cybersecurity, Healthcare Data Breaches, Us Health Sector, Proactive Defense.