Digitalization has revolutionized healthcare, but it has also exposed the healthcare sector to increasingly sophisticated cyber threats. According to a report by Check Point Software Technologies, in the first quarter of 2023, the healthcare sector experienced an average of 1,684 attacks per week, representing a year-over-year increase of 22%.
These cyberattacks not only compromise the confidentiality of medical information, but can also disrupt critical services, directly impacting patient care. For example, a Microsoft Threat Intelligence study revealed that healthcare organizations lose an average of $900,000 per day in downtime alone due to ransomware attacks.
Furthermore, in Colombia, 60% of the cyberattacks recorded in 2024 targeted institutions in the health sector, putting the information of nearly 51 million users affiliated with the system at risk.
Cyberattacks targeting the healthcare sector worldwide
1. Hospital Clínic de Barcelona (Spain, 2023)
In March 2023, the Hospital Clínic in Barcelona suffered a cyberattack that paralyzed its computer systems, affecting critical services such as the emergency room, laboratory, and pharmacy. More than 150 non-urgent surgeries and up to 3,000 medical appointments were canceled. The cybercriminal group RansomHouse demanded a ransom of $4.5 million for the encrypted information, which included 4.5 terabytes of sensitive data.
2. Prospect Medical Holdings (United States, 2023)
In August 2023, Prospect Medical Holdings, which operates 16 hospitals and 165 outpatient centers in the US, was the victim of a ransomware attack that forced the shutdown of computer systems and the disruption of medical services. The Rhysida group claimed responsibility for the attack and stated that it had stolen more than 500,000 Social Security numbers and other sensitive data, offering the information on the dark web for 50 bitcoins.
3. Health Service Ireland (HSE, 2021)
On May 14, 2021, Ireland’s Health Service (HSE) suffered a ransomware attack that forced the shutdown of all its computer systems nationwide. The attack, attributed to the Conti group, affected essential services, including radiology and oncology, and led to the cancellation of medical appointments and treatments. The estimated cost of recovery exceeded $83 million.
4. University Hospital of Düsseldorf (Germany, 2020)
In September 2020, a ransomware attack on the University Hospital of Düsseldorf encrypted 30 servers, crashing the computer system and forcing the closure of the emergency room. A critically ill patient had to be transferred to another hospital 30 km away, where she died. This case is considered the first known death linked to a cyberattack.
5. Audifarma (Colombia, 2023)
In January 2023, Audifarma suffered a ransomware attack that affected its web and mobile systems, disrupting key services such as virtual appointments and home delivery requests. Although medication delivery continued, there were delays and concern among users. The incident highlighted the urgent need to strengthen cybersecurity in the Colombian healthcare sector.
6. University Hospital of Caldas (Colombia, 2024)
In March 2024, the University Hospital of Caldas in Colombia was the victim of a ransomware attack that affected its entire digital infrastructure, compromising two physical servers and ten virtual servers. The institution activated a contingency plan that included manual operation and data recovery through redundant security repositories.
These incidents demonstrate that cyberattacks in the healthcare sector not only compromise sensitive data but also jeopardize patients’ lives and the continuity of medical services. Investing in cybersecurity is essential to protect the integrity of healthcare institutions and ensure safe and reliable care.