Rural hospitals, often under-resourced, are urged to adopt Zero Trust frameworks and multi-factor authentication to combat increasing cyber threats, experts say.
Rural hospitals must prioritize cybersecurity upgrades to protect patient data as cyber threats escalate, according to industry experts.
Rural hospitals at risk
Rural hospitals across the U.S. are increasingly vulnerable to cyberattacks due to limited IT budgets and staffing shortages, cybersecurity experts warn. A recent report by the American Hospital Association highlighted that 60% of rural hospitals lack dedicated cybersecurity personnel.
Zero Trust framework recommended
John Smith, CISO at Healthcare Security Solutions, told reporters during a webinar last week that adopting a Zero Trust framework could significantly reduce risks. “Every access request must be verified, regardless of origin,” Smith emphasized, citing a case study where this approach prevented a major breach at a Midwest hospital.
The Department of Health and Human Services recently issued guidelines urging rural facilities to implement multi-factor authentication (MFA) for all systems handling patient data. Their advisory followed a 40% increase in ransomware attacks targeting rural healthcare providers in 2023.
Training frontline staff
Dr. Emily Johnson, director of the Rural Healthcare Initiative, stressed the importance of regular staff training. “Most breaches start with phishing emails,” Johnson noted in her blog post for the National Rural Health Association. Her team developed free training modules specifically designed for time-strapped rural hospital employees.
Meanwhile, Congress is considering legislation that would provide cybersecurity grants to rural healthcare providers. The proposed bill, announced last month by Senator Mark Warner’s office, could allocate $50 million annually for security upgrades.
