Ransomware Attacks in Health Care: Implications for Hospitals and Patients

Presented by Hannah Neprash, PhD
Assistant Professor
Division of Health Policy & Management

Hospitals and other health care providers face a growing cybersecurity threat, particularly from ransomware attacks. During a ransomware attack, cybercriminals hack a provider’s network, install malware to prevent users from accessing their systems, and demand ransom payment to restore access. In one survey, 43% of large health systems reported experiencing a ransomware attack within the past two years. This project builds the first comprehensive database of ransomware attacks (2016-2021) against healthcare providers.

Neprash provides descriptive statistics on the evolving nature of ransomware attacks affecting health care providers. As a case study, she examines a recent ransomware attack that affected a large health system with ≥20 short-term acute care hospitals nationwide. She finds evidence suggesting a dramatic shift in operations for ransomware-attacked hospitals, with spillover effects for nearby facilities and potentially negative consequences for patient outcomes.

REGISTER TO LIVESTREAM THIS EVENT