71% of Healthcare Organizations Are More Concerned about Insider Threats Now than before the Pandemic

Netwrix report reveals that concern about the risks of data theft by employees and IT admin mistakes has soared since the pandemic

News provided by

Netwrix

Oct 13, 2020, 08:00 ET

IRVINE, Calif., Oct. 13, 2020 /PRNewswire/ -- Netwrix, a cybersecurity vendor that makes data security easy, today announced healthcare market findings from its 2020 Cyber Threats Report. Netwrix conducted this online survey in June 2020 to understand how the pandemic and ensuing work-from-home initiatives changed the IT risk landscape.

Because healthcare organizations are on the front line of the battle to contain COVID-19, they had to revise their cybersecurity priorities more quickly than perhaps any other vertical market. Pre-pandemic, they were mostly concerned about employees accidently sharing sensitive data (88%) and rogue admins (80%); today they are worried about phishing (87%), admin mistakes (71%) and data theft by employees (71%).

As it turns out, their perceptions of risk are both founded and unfounded. They are correct to be concerned about phishing and IT staff errors, since those types of incidents were experienced by 37% and 39% of respondents, respectively, during the first few months of the pandemic. However, even though 37% suffered improper data sharing, concern about this risk plummeted by 32 percentage points since the pandemic began.

Other findings discovered by the survey include:

Every third healthcare organization surveyed (32%) experienced a ransomware attack, which is the highest result among all verticals studied.
26% of healthcare organizations reported data theft by employees; 49% of them were unaware of the incident for weeks or months.
Concern about supply chain compromise dropped by a record 50 percentage points from the pre-pandemic level; now, only 25% say it is a top security threat.
No respondents were able to discover improper data sharing in minutes. 26% needed hours and 74% had to spend days, weeks or months to flag the incident.
8 out of 10 healthcare organizations regularly report on the state on cybersecurity to executive leadership, and 47% are convinced it takes too much time and effort.

"With 39% of healthcare organization experiencing incidents due to errors by IT staff, this industry should pay particular attention to the activities of privileged users. Even one mistake can bring the entire organization to a standstill, leaving it unable to take care of patients. To mitigate the risk of admin mistakes, it is essential to rigorously enforce the least privilege principle through regular privilege attestation. To ensure quick detection of unauthorized modifications, healthcare organizations are advised to automate both monitoring of changes and checking of all system configurations against a healthy baseline," said Ilia Sotnikov, VP of Product Management at Netwrix.

To get the complete findings of the Netwrix 2020 Cyber Threats Report, please visit https://www.netwrix.com/2020_cyber_threats_report.html

About Netwrix

Netwrix makes data security easy, thereby simplifying how professionals can control sensitive, regulated and business-critical data, regardless of where it resides. Over 10,000 organizations worldwide rely on Netwrix solutions to secure sensitive data, realize the full business value of enterprise content, pass compliance audits with less effort and expense, and increase the productivity of IT teams and knowledge workers.

Founded in 2006, Netwrix has earned more than 150 industry awards and been named to both the Inc. 5000 and Deloitte Technology Fast 500 lists of the fastest growing companies in the U.S.

For more information, visit www.netwrix.com.

CONTACT:

Erin Jones
Avista PR for Netwrix
P: 704.664.2170
E: [email protected]

SOURCE Netwrix