EU unveils plan to protect hospitals from rising cyberattacks

The European Union announced urgent new measures on Wednesday to tackle the growing threat posed to hospitals and the broader healthcare sector by a surge in cyberattacks.

Such attacks include data breaches or ransomware — a form of digital blackmail in which hackers encrypt data or block services, demanding users pay to regain access.

World Health Organization chief Tedros Adhanom Ghebreyesus in November warned such ransomware attacks on hospitals “can be issues of life and death” as WHO and some 50 countries raised concerns at the United Nations about the rising threat.

There were 309 “significant cybersecurity incidents” affecting the EU’s healthcare sector in 2023, the European Commission said, more than any other critical industry in the bloc.

The EU warned hospitals and healthcare providers were “particularly vulnerable” to such threats, which can disrupt treatment and risk patients’ data safety.

Planned measures include setting up a pan-European cybersecurity support centre for hospitals and healthcare providers.

The proposal aims to encourage hospitals to secure data with robust backup systems, to train staff to better respond to cyber threats — and help healthcare providers avoid paying ransoms.

The EU will expand ransomware decryption tools to support recovery from cyberattacks as part of the plan that seeks to protect uninterrupted care for patients.

It also urges the EU’s 27 member states to prepare national plans to bolster cybersecurity in the sector, taking into account the specific risks in each country.

The commission said it would discuss the threats further with the sector to create a “more detailed and targeted” plan by the end of the year.

“Prevention is better than cure, so we need to prevent cyberattacks from happening. But if they happen, we need to have everything in place to detect them and to quickly respond and recover,” the EU’s tech chief, Henna Virkkunen, said in a statement.

“Patients must feel confident that their most sensitive information is secure. Healthcare professionals must have faith in the systems they use daily to save lives,” said the bloc’s health commissioner, Oliver Varhelyi.