Hacking Acute Care: A Qualitative Study on the Healthcare Impacts of Ransomware Attacks Against Hospitals

Autor: Liselotte S. van Boven, Renske W.J. Kusters, Derrick Tin, Frits H. M. van Osch, Harald De Cauwer, Linsay Ketelings, Madhura Rao, Christian Dameff, Dennis G. Barten
Rok vydání: 2023
Popis: Background and objectivesCyberattacks against healthcare institutions are an increasing threat and have the potential to impair health outcomes. Current research is limited and focuses mainly on the technical consequences, whereas little is known about the healthcare staff experiences and the impact on emergency care, both during the incident and in the recovery phase. This study aims to explore the impact of a sample of large ransomware attacks against hospitals between 2017 and 2022 on acute care delivery and patient care during the recovery phase.MethodsThis interview-based qualitative study assessed the experiences of emergency healthcare professionals and Information and Communication Technology (ICT) staff and investigated the challenges faced when struck by a major hospital ransomware attack. The semi-structured interview guideline was based on current literature and cybersecurity expert consultation. Transcripts were anonymized and information tracing back to participants and/or their organizations was removed for privacy purposes.ResultsNine participants were interviewed, including emergency healthcare providers and ICT-focused staff. Five themes were constructed from the data: impact and challenges regarding patient care continuity, challenges during the recovery process, personal impact on healthcare staff, preparedness, and lessons identified and future recommendations.ConclusionsAccording to the participants of this qualitative study, ransomware attacks have a significant impact on emergency department (ED) workflow, acute patient care and the personal wellbeing of healthcare providers. Preparedness for such incidents is often limited and many challenges are encountered during the acute and recovery phase of the attack. Proactive preparedness efforts are essential to improve contingency planning and to develop response strategies for hospital ransomware attacks.
Databáze: OpenAIRE