The Government-funded Cyber Wardens initiative, which aims to help small businesses keep themselves safe from cyber crime, has turned its attention to the healthcare industry after a string of high-profile cyber attacks. These included an incident where major IVF provider Genea had sensitive patient information leaked on the dark web, including addresses, phone numbers, Medicare records and medications.
In response, Cyber Wardens has recently launched its Cyber Aid program tailored specifically to small healthcare businesses. The program will provide free training to help healthcare professionals defend themselves against cyber threats.
COSBOA pointed out that small providers such as GP clinics, podiatrists and massage therapists are just as vulnerable to cyber crime, as online fraudsters increasingly target the industry and the Cyber Aid program seeks to build up their cyber defences.
“The health industry is a lucrative target for cyber criminals and the recent Genea attack is a timely reminder for every health service provider across Australia to bolster their cyber defences,” said COSBOA CEO Luke Achterstraat.
Figures indicate that small businesses, including medical practices, lose an average of $49,600 per attack – a cost many of them are unable to afford. Patients are also affected by such breaches, with research showing 82 per cent of Australians fear unauthorised access to their health records.
Healthcare sector number one target for data breaches
Related findings from the Office of the Australian Information Commissioner indicate that the healthcare sector is the number one target for data breaches, making up 19 per cent of all notifiable incidents in the first half of 2024. In fact, a cybercrime was reported on average every six minutes in 2023-24, and more than 11 per cent of attacks were directed at critical infrastructure, including healthcare systems.
“Cyber security is no longer just an IT issue – it’s a patient safety issue. With 95 per cent of cyber attacks caused by human error, every healthcare professional has a role in protecting sensitive information and ensuring compliance with privacy regulations,” said Achterstraat.
