Could hackers threaten your health?
September 29, 2017 | Medical device, cybersecurity
Increasing cyber threats mean medical device providers must now take security matters more seriously, writes our Say technology blogger.
Like many industries, healthcare has been swept up in an ever-growing tide of technological innovation. New technology can increase the quality and capabilities of medical care without causing a corresponding increase in cost. However, this innovation also carries a degree of risk.
Last year researchers from the University of Leuven in Belgium and the University of Birmingham in the UK found a way to hack into implanted medical devices. Intercepting signals between pacemakers and their programmers, they were able to steal medical information, drain the device’s battery, and even send malicious messages, causing the devices to malfunction and disrupt critical lifesaving care.
This problem is not isolated. Implanted devices often connect to sensors and monitors within a hospital without using passwords, encryption or other security measures. Wireless connectivity and remote monitoring make it easier for health providers to adjust device settings without invasive procedures, but they also create a potential ‘back-door’ into hospital networks. Unsecured devices can provide hackers with an entry point to steal valuable medical data or launch a widespread ransomware attack.
Unfortunately, hospitals make appealing targets. Not only do they hold valuable troves of highly sensitive data, which can be used for anything from identity theft to illegally obtaining prescription medication, they also hold responsibility for hundreds of lives. If a hospital’s network is shut down by ransomware, they must act quickly to take back control and safeguard patients.
The global WannaCry ransomware attack in May proved that this risk is real. The attack severely impacted NHS health services in the UK and even, as Forbes’ Thomas Brewster reported, spread to some medical devices in the USA, showing just how vulnerable healthcare can be to a cyberattack.
Luckily, medical device makers are waking up to this growing threat. In this year’s Def Con hacking conference, representatives from the US FDA, the government body responsible for the security of medical devices, spoke for the first time. Attempting to spark a dialogue between medical device makers and “white hat” hackers, their main goal was to encourage cooperation. If both sides work together, they can find potential flaws and vulnerabilities in medical equipment, enabling companies to fix them before they can be exploited. At the same time, producers of medical devices (including Johnson & Johnson and Philips) have also started sending staff to Def Con in order to keep abreast of the latest developments in cybersecurity.
After being hit by recent discoveries of security flaws in on-the-market insulin pumps, pacemakers, and infusion pumps, cyber security researchers and medical suppliers are even considering a “Hippocratic oath” for device makers who, like doctors, would vow to act in the best interest of patients. There has also been an increase in regulatory action, with the FDA now requiring a firmware update intended to reduce the risk of a certain type of cardiac pacemaker being hacked.
While it is impossible to deny the myriad advantages that come with today’s advancing medical technology, increasing cyber threats mean medical device providers must now take security matters to heart, literally.
This content was provided by Say Communications
Company Details
Latest Content from Say Communications
Keeping A&E usage to a minimum – the comms challenges
Say’s latest blog takes a festive trip to A&E, and reflects on the comms challenges facing this overworked department.
2015 was avid for the avocado
In 2015 avocado trended across the media. One Say blogger wonders what PR lessons we can learn from this healthy fruit?
Doctor doctor, where are all the men?
New data show that half of men put off visiting the doctor. Why is this and what can be done to prevent it?
Digital health: Breaking barriers in Health by Debashis Bhattacharya and Kamlesh Sheth
Co-founding directors of Aegleio, Kamlesh Sheth and Debashis Bhattacharya, urge us to welcome digital health.
Celebrities communicating a health or charity message by Jenny Agutter
Call the Midwife star Jenny Agutter talks about the power of celebrity in communicating health and charity messages.
Can Bitcoin make your medical records more secure?
Discover why the data encryption technology 'blockchain' could be the safest option for the future of medical records storage
Communicating the prevention message by Tam Fry
Tam Fry, spokesperson of the National Obesity Forum, discusses how prevention is key to tackling the childhood obesity epidemic in the UK.
Why is behaviour change so difficult? By Patrick Ladbury, Communications Manager at the National Social Marketing Centre.
Patrick Ladbury nudges us to overcome the barriers to behaviour change. Read on to find out.
Why is the UK lagging behind the rest of Europe in cancer survival?
Say Communications, London healthcare PR agency, discusses the latest technologies that will improve cancer survival rates in UK
England may be losers, but is your health a winner?
England is out of the 2015 rugby world cup, but is your health a winner?