What We Do
How we do it
Resources
SECURITY ADVISORIES
May 11, 2022
CVE-2022-26923 - Active Directory Domain Services Elevation of Privilege Vulnerability
THE THREAT Microsoft has disclosed a new vulnerability impacting Active Directory Certificate Services (ADCS) tracked as CVE-2022-26923 (Active Directory Domain Services Elevation of Privilege Vulnerability). If exploited successfully, an authenticated attacker can escalate privileges in environments where ADCS is running on the domain. eSentire is aware of technical details and tooling [2] for…
Read More
View all Advisories →
Company
ABOUT ESENTIRE
About Us
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 1200+ organizations in 75+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
Read about how we got here
Leadership Work at eSentire
LATEST PRESS RELEASE
May 17, 2022
Cybersecurity Leader eSentire Continues Its Commitment to Rigorous Security Standards Earning PCI DSS Certification
Waterloo, ON, May 17, 2022 — eSentire, the Authority in Managed Detection and Response (MDR), maintains one of the most secure and robust IT environments of any MDR provider in the industry. To that end, eSentire today announced that it has received the Payment Card Industry Data Security Standard (PCI DSS) certification, considered one of the most stringent and comprehensive payment card…
Read More
Partners
PARTNER PROGRAM
e3 Ecosystem
We provide sophisticated cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). Find out why you should partner with eSentire, the Authority in Managed Detection and Response, today.
Learn more
ECOSYSTEM PARTNER RESOURCES
Apply to become an e3 ecosystem partner with eSentire, the Authority in Managed Detection and Response.
Login to the Partner Portal for resources and content for current partners.
Search
Resources
Blog — Feb 22, 2018

Healthcare industry growing target for cybercriminals

Speak With A Security Expert Now

Over the next several weeks, we will look at cybersecurity within the context of the healthcare industry. The fact is, the number of breaches reported by medical organizations increased from just 16 in 2012 to more than 119 breaches in 2017. Thus, it’s important that healthcare professionals recognize the growing risk of data breaches and cyber-attacks so they can take the necessary precautions to avoid them. But before we can go any further, the healthcare industry needs to understand why it’s a growing target.

The healthcare industry is a growing target

If a cyber-attack was launched against the healthcare system of North America in its current state, there would probably be little to stop it. But what are the actual chances of a wide-scale attack?

The American Recovery and Reinvestment Act of 2009 requires that U.S. medical organizations publicly report criminal breaches affecting 500 or more individuals. The data below presents an exponential upward trend in U.S. healthcare data breaches.

Figure 1: U.S. Healthcare Data Breaches

As previously mentioned, the number of breaches reported increased from just 16 in 2012 to more than 119 breaches in 2017. That’s a big difference. Not to mention these numbers only reflect detected large-scale breaches, which represent just a fraction of successful attacks in the wild.

The threat is real

On May 12, 2017, organizations around the world fell victim to a new variant of ransomware called WannaCry. The attack targeted 200,000 machines in more than 150 countries, spreading itself through the Server Message Block (SMB) protocol, which is used by Windows computers to share files.

The attack caused chaos for Britain’s National Health Service (NHS), crippling its ability to properly treat patients. Thousands of operations and appointments had to be canceled as a result of the attack, which could have been prevented by installing the patch released by Microsoft two months earlier.

What makes healthcare so vulnerable to cyber-attack?

Fortunately, the eSentire Threat Intelligence team set out to investigate what makes the healthcare industry both vulnerable to cybercrime and attractive to threat actors. What they’ve found is three-fold:

  1. The healthcare industry’s poor security posture makes it susceptible to the most basic opportunistic attacks.
  2. The value of patient records and the critical role medical facilities play in national stability make healthcare an attractive target for both financially-motivated and politically-motivated attacks.
  3. Delivery of ransomware through phishing is a common attack vector experienced by healthcare providers, in addition to Point-of-Sale attacks and exploitation of vulnerabilities on exposed services.

In addition to these primary vulnerabilities, there are other things to consider. Many healthcare organizations don’t invest very much in hiring enough skilled cybersecurity practitioners, which can put them at a disadvantage in defending against cyberthreats. Furthermore, there tends to be insufficient investment made in the technologies needed to mitigate a data breach. These two factors, paired with outdated systems, applications and technologies makes for a very difficult cybersecurity challenge.

Hope need not be lost, though. For each vulnerability mentioned, there are measures that healthcare organizations can take to counteract them. Besides spending more money on cybersecurity resources, there are strategic measures you can take to reduce the threat to your organization.

View Most Recent Blogs
eSentire
eSentire

eSentire is the Authority in Managed Detection and Response, protecting the critical data and applications of 1200+ organizations in 75+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events. Combining cutting-edge machine learning XDR technology, 24/7 Threat Hunting, and proven security operations leadership, eSentire mitigates business risk, and enables security at scale. The Team eSentire difference means enterprises are protected by the best in the business with a named Cyber Risk Advisor, 24/7 access to SOC Cyber Analysts & Elite Threat Hunters, and industry-leading threat intelligence research from eSentire’s Threat Response Unit (TRU). eSentire provides Managed Risk, Managed Detection and Response and Incident Response services. For more information, visit www.esentire.com and follow @eSentire.