← Back to Insights
March 13, 2024
David Burda
Economics Outcomes System Dynamics

Third Time’s Not the Charm for Healthcare Ransomware Attacks

Once is news. Twice is a trend. The third time is old news.

That’s one approach to covering a beat if you’re a reporter.

If you’re running a healthcare business, ransomware attacks are old news. You know they’re coming, and you should be ready for them and be able to prevent them or at least react to them effectively to protect your business and your customers.

That’s what makes what happened to Change Healthcare so frustrating to watch. The ransomware attack was a matter of when, not if, yet the company wasn’t prepared for it, able to prevent it or respond to the attack effectively to protect its business and customers.

For our take on it, please listen to the March 7, 2024, episode of our 4sight Health Roundup podcast, “Lessons Learned From the Change Healthcare Ransomware Attack,” on 4sighthealth.com.

How do we know ransomware attacks on healthcare businesses are old news? Let’s look at the last three annual reports published by the FBI’s Internet Crime Complaint Center, or IC3. IC3 issued its most recent annual report earlier this month.

One of the many things IC3 does is track ransomware attacks on critical infrastructure sectors of the U.S. economy. Healthcare and public health are one of the 16 critical infrastructure sectors monitored by IC3.

  • In 2021, healthcare and public health ranked first with the most ransomware attacks with 148. A distant second was financial services with 89. The defense industrial base had one.
  • In 2022, healthcare and public health ranked first with the most ransomware attacks with 210. A distant second was critical manufacturing with 157. The defense industrial base had one.
  • In 2023, healthcare and public health ranked first with the most ransomware attacks with 249. A closer second was critical manufacturing with 218. The defense industrial base had two.

News. A trend. Old news. When IC3 releases its annual report about this same time next year, my hunch is it will be old news again with healthcare getting hit with the most ransomware attacks.

Healthcare knows it’s coming. The question is, will it be prepared next time?

Another question is, what are businesses in the defense sector of the economy doing that healthcare businesses aren’t? The answers and solutions are clearly there. It just takes the will and investment to adopt them and protect healthcare consumers.

Thanks for reading.

To learn more about this topic, please listen to the March 30, 2023, 4sight Health Roundup podcast, “Ransomware, Cybersecurity and Healthcare,” on 4sighthealth.com.

About the Author

David Burda

David Burda began covering healthcare in 1983 and hasn’t stopped since. Dave writes this monthly column “Burda on Healthcare,” contributes weekly blog posts, manages our weekly newsletter 4sight Friday, and hosts our weekly Roundup podcast. Dave believes that healthcare is a business like any other business, and customers — patients — are king. If you do what’s right for patients, good business results will follow.

Dave’s personnel experiences with the healthcare system both as a patient and family caregiver have shaped his point of view. It’s also been shaped by covering the industry for 40 years as a reporter and editor. He worked at Modern Healthcare for 25 years, the last 11 as editor.

Prior to Modern Healthcare, he did stints at the American Medical Record Association (now AHIMA) and the American Hospital Association. After Modern Healthcare, he wrote a monthly column for Twin Cities Business explaining healthcare trends to a business audience, and he developed and executed content marketing plans for leading healthcare corporations as the editorial director for healthcare strategies at MSP Communications.

When he’s not reading and writing about healthcare, Dave spends his time riding the trails of DuPage County, IL, on his bike, tending his vegetable garden and daydreaming about being a lobster fisherman in Maine. He lives in Wheaton, IL, with his lovely wife of 40 years and his three children, none of whom want to be journalists or lobster fishermen.

Recent Posts

Stop Weeping for Physician Practices
4sight Health published a blog post last month in which I said it was disingenuous of physicians to… Read More
By April 17, 2024
GoFundMe Helps Some Pay for Healthcare, but it’s an Awful Solution
During the chaotic runup to the 2020 elections, President Trump nominated Judge Amy Coney Barrett to fill Ruth… Read More
By April 16, 2024
Podcast: Will This HHS Proposal Refill Empty Pill Bottles? 4/11/24
HHS and the White House have a plan to mitigate the chronic shortages of prescription drugs. Will it… Read More
By April 11, 2024