Over 50% of Medical Devices In Hospitals Are Vulnerable

Research from Cynerio shows that 53% of connected medical devices in hospitals have a known critical vulnerability.

The healthcare industry is currently at the top of the list for cyber attacks. With medical devices unprotected, both hospitals and patients are at risk of suffering data security issues. At least 1/3rd of bedside IoT devices have an identified critical risk. A breach could impact services, confidentiality, as well as patient safety. This could even include potential loss of life.

Some of the top issues that hospitals face in this area include:

• IV pumps being the most common IoT healthcare devices. Up to 73% of them have a vulnerability that could put patients at risk.
• Running outdated Windows versions. Anything older than Windows 10 accounts for a large percentage of devices used by laboratories, surgical departments, etc. Patients connected to these devices may be left open to outside exploitation.
• Default passwords and settings constitute a common risk. Attackers can gain access via information from online manuals in order to mess with weak or default credentials.

A segmented network can address IoMT risks, and is an effective risk mitigation strategy. But it’s only one piece of the puzzle. Building defensive strategies through a HIPAA-compliant layered approach offers a more well-rounded cybersecurity framework.

If you need assistance in getting your medical devices secured, contact us today at 585-582-1600.