Healthcare sector faces surge in ransomware attacks, Sophos finds

A recent survey by Sophos, a cybersecurity solutions provider, reveals that ransomware attacks on healthcare organizations have hit a four-year high, with two-thirds or 67% of these organizations reporting incidents in the past year. 

Sophos’ “State of Ransomware in Healthcare 2024” report highlights an alarming trend: while ransomware rates are falling in most sectors, healthcare organizations are increasingly targeted.

“The highly sensitive nature of healthcare information and need for accessibility will always place a bullseye on the healthcare industry from cybercriminals,” John Shier, field CTO of Sophos, said in a statement. “Unfortunately, cybercriminals have learned that few healthcare organizations are prepared to respond to these attacks, demonstrated by increasingly longer recovery times.”

Shier added that these delays can disrupt patient care, underscoring the impact on healthcare services.

According to the report, only 22% of healthcare organizations that suffered ransomware attacks fully recovered within a week, a drop from 47% in 2023. Over a third required more than a month to regain normal operations, reflecting the increasing complexity of these attacks.

Other key findings from the Sophos report include a rise in the costs associated with recovery. On average, healthcare organizations spent $2.57 million on recovery in 2024, compared to $2.2 million the previous year. Also, 57% of institutions that paid a ransom ended up paying more than the initial demand.

The survey also found that 95% of affected healthcare organizations reported attackers attempting to compromise their data backups, increasing the pressure on them to pay the ransom.